--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"debug","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"debug","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:01:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:01:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:01:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55760","PortSpecifier":{"PortValue":55760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55760","PortSpecifier":{"PortValue":55760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275303,"nanos":655711852},"http":{"id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06412159-67dc-4aae-9cfc-5f88617ad7bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59608","PortSpecifier":{"PortValue":59608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59608","PortSpecifier":{"PortValue":59608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275303,"nanos":724236377},"http":{"id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8431dce6-ed9b-44b5-a3d3-d07cf3b55594","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","method":"GET","path":"/maas-api/v1/api-keys/2ebc9ec0-b82a-4ab7-bceb-bca3aae2806f","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275303,"nanos":790215294},"http":{"id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","method":"GET","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2ebc9ec0-b82a-4ab7-bceb-bca3aae2806f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2ebc9ec0-b82a-4ab7-bceb-bca3aae2806f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83aaf921-a75c-4cca-91d3-79dd5a561b23","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59612","PortSpecifier":{"PortValue":59612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e342b217-4723-47c1-9abd-2c971bd9f738","method":"GET","path":"/maas-api/v1/api-keys/9b6d44bf-943b-44f8-9532-f082d5576d86","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59612","PortSpecifier":{"PortValue":59612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275303,"nanos":828494086},"http":{"id":"e342b217-4723-47c1-9abd-2c971bd9f738","method":"GET","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b6d44bf-943b-44f8-9532-f082d5576d86",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9b6d44bf-943b-44f8-9532-f082d5576d86",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:01:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e342b217-4723-47c1-9abd-2c971bd9f738","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c418e8a-7c58-4711-abad-264c1099fb43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40936","PortSpecifier":{"PortValue":40936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275328,"nanos":539493595},"http":{"id":"5c418e8a-7c58-4711-abad-264c1099fb43","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c418e8a-7c58-4711-abad-264c1099fb43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275328,"nanos":598471748},"http":{"id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f4c56d3-e7e2-4775-82ac-7de33fa0cd8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40952","PortSpecifier":{"PortValue":40952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a38a7c93-f481-4608-9de2-38b9ff140d41","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40952","PortSpecifier":{"PortValue":40952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275328,"nanos":644559410},"http":{"id":"a38a7c93-f481-4608-9de2-38b9ff140d41","method":"GET","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YuMQaTsw8Zm0VeCF_Ik8Eqk9g5UAgu31yWKVbO4UNRJ6TLqlcOZIKmkSENEA"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YuMQaTsw8Zm0VeCF_Ik8Eqk9g5UAgu31yWKVbO4UNRJ6TLqlcOZIKmkSENEA\"}"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36a4702b-75bc-4186-a1ba-0f275027d110","keyName":"e2e-auth-iso-a-569476","subscription":"e2e-auth-iso-a2cfb7","tenant":"e2e-shared-a-d805bd","userId":"36a4702b-75bc-4186-a1ba-0f275027d110","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a2cfb7"} {"level":"info","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38a7c93-f481-4608-9de2-38b9ff140d41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45128","PortSpecifier":{"PortValue":45128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45128","PortSpecifier":{"PortValue":45128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275346,"nanos":90652689},"http":{"id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a62c1ac-ba08-4c3f-9fe1-7ef91474ac7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58816","PortSpecifier":{"PortValue":58816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58816","PortSpecifier":{"PortValue":58816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275346,"nanos":138454766},"http":{"id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15e1b6a1-3c3d-4ac9-afef-64ce3522dd1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58826","PortSpecifier":{"PortValue":58826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63a53925-efb2-4048-b524-e6254bca4ae5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58826","PortSpecifier":{"PortValue":58826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275346,"nanos":186373610},"http":{"id":"63a53925-efb2-4048-b524-e6254bca4ae5","method":"GET","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-81IiBpnEGWsJbc1s_AmSqYA7j8sXKgMPmyWCsz5wi0uI590ZL2YwBEKu2zwZ"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-81IiBpnEGWsJbc1s_AmSqYA7j8sXKgMPmyWCsz5wi0uI590ZL2YwBEKu2zwZ\"}"} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T08:02:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63a53925-efb2-4048-b524-e6254bca4ae5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40772","PortSpecifier":{"PortValue":40772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87e19930-dfb1-4a00-933c-b4383ac13097","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40772","PortSpecifier":{"PortValue":40772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275361,"nanos":730476200},"http":{"id":"87e19930-dfb1-4a00-933c-b4383ac13097","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e19930-dfb1-4a00-933c-b4383ac13097","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41194","PortSpecifier":{"PortValue":41194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275361,"nanos":766906610},"http":{"id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a39f90-fb86-4701-b6c2-a532c2b7a279","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9327461e-5177-4175-8e78-faf3b60cbfd7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275361,"nanos":803390482},"http":{"id":"9327461e-5177-4175-8e78-faf3b60cbfd7","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9327461e-5177-4175-8e78-faf3b60cbfd7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275361,"nanos":840052274},"http":{"id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:02:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfabadc2-b95f-45d8-a4d9-f4e4882de4fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47756","PortSpecifier":{"PortValue":47756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47756","PortSpecifier":{"PortValue":47756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275381,"nanos":532429886},"http":{"id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"431c8b8e-77ef-47d6-8f14-bb3ae4919399","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46332","PortSpecifier":{"PortValue":46332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46332","PortSpecifier":{"PortValue":46332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275381,"nanos":576415484},"http":{"id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5ef629-ebf2-4eac-a15b-8898850e562b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46342","PortSpecifier":{"PortValue":46342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","method":"GET","path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46342","PortSpecifier":{"PortValue":46342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275381,"nanos":620538835},"http":{"id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","method":"GET","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae92f0d-58cd-4115-9d0e-c18be8ea84f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47770","PortSpecifier":{"PortValue":47770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","method":"GET","path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47770","PortSpecifier":{"PortValue":47770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275381,"nanos":658417884},"http":{"id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","method":"GET","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a0967ea-952b-4535-bb00-fe955f026009",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20aff5b9-b89e-404c-a2fe-18440e40bdb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b37cb4-4749-492c-b562-66233981936e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0b37cb4-4749-492c-b562-66233981936e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b37cb4-4749-492c-b562-66233981936e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42542","PortSpecifier":{"PortValue":42542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275406,"nanos":450518154},"http":{"id":"c0b37cb4-4749-492c-b562-66233981936e","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0b37cb4-4749-492c-b562-66233981936e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0b37cb4-4749-492c-b562-66233981936e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b37cb4-4749-492c-b562-66233981936e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b37cb4-4749-492c-b562-66233981936e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b37cb4-4749-492c-b562-66233981936e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df3654b6-dfbb-49ae-a090-f9d98225172b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33668","PortSpecifier":{"PortValue":33668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275406,"nanos":491626309},"http":{"id":"df3654b6-dfbb-49ae-a090-f9d98225172b","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/auth-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df3654b6-dfbb-49ae-a090-f9d98225172b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42558","PortSpecifier":{"PortValue":42558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42558","PortSpecifier":{"PortValue":42558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275406,"nanos":535274623},"http":{"id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmeEzyiavF5c63RU_f0cdzoEFOcEgYmgnEGJj16mbTArEVltNnd3D6caZHs9"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BmeEzyiavF5c63RU_f0cdzoEFOcEgYmgnEGJj16mbTArEVltNnd3D6caZHs9\"}"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"facb03cf-915b-466f-b38f-36242049ca67","keyName":"e2e-auth-iso-a-be64ea","subscription":"e2e-auth-iso-8173d9","tenant":"e2e-shared-a-d805bd","userId":"facb03cf-915b-466f-b38f-36242049ca67","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/auth-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8173d9"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1d5f71b-4915-4596-b2bf-a2382bd86d34","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e7e8dc8aee6d9d3ae9c71612caaac4e60a07113a4811c5131746235ed5836b"} {"level":"info","ts":"2026-07-17T08:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab4827cde965c3c8c9a5db40700142522a39c6ad8d669c8ac6d5294bf37538c"} {"level":"info","ts":"2026-07-17T08:03:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93b539e79526d61d95d3b2bcb22d411a9ce9d05bc281874d3b9d493298de725c"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4253087c6b571ff65b8d90555e5efb9af39c93ff295f880df48b91f64c237718"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72071f21ff5cf9d09d0fd2c6c39dd6bc7a0ef7f5753551ba8b86b08609893fdd"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415df0c32bde853858a1f9b0a4eb4df965e2b5fbcf6629905354a7127b8289a9"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d68828ba550ca48954df14f646cf555ac6419b8a850ecda0e548cb102220239"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22f62b809d8763407a2bf4966f1137d5afc210d20f57cf8ed3e47a1c4a909727"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43292950ee0cc4ede137b7929f231650e9a917edd1547fb831a44451e69e903d"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b04ed016e26f63de34cf94a998f48a4783263977abc3f31424773c94c2fb16"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b6fc9d34c27034dda8ffb9a65ceada8b7a1ef0ee60bf15102b31ff689888e8d"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e1cbc2d06be05385868114d7b7f579fc688b017034a685dafa99ac2b7fadc52"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af7549faab4b62a5fff1a9062736811cacfa0409493570849115ab5293afbdab"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a006d916e20cfb276024da4cd892be5b364ef43f965d9a02a7bd2028737948a"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58f14bfb5ae29fbf33c1a5980cb81ae74a42e99d0f6b53a307c8fc6d0c289a98"} {"level":"info","ts":"2026-07-17T08:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9eb43f6f30090e42dc0b9303b1581d8e24e90af6697223e89b050891ab4e8091"} {"level":"debug","ts":"2026-07-17T08:03:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"error","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"info","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"} {"level":"error","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"info","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd94f6b3e66efad072a64f84d51d9c6c0685d59d15cdab0a6cbaf14898d6ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd94f6b3e66efad072a64f84d51d9c6c0685d59d15cdab0a6cbaf14898d6ffa"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f6876afe20f0827320a99f0bedbdbc44ee4cdd3a59889b5a2f450b7cf1f0552","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f6876afe20f0827320a99f0bedbdbc44ee4cdd3a59889b5a2f450b7cf1f0552"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"794d5c53f071fc92a47a428f54c237fd7f0dd18dd4b279f3cd83b2ee2681622f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794d5c53f071fc92a47a428f54c237fd7f0dd18dd4b279f3cd83b2ee2681622f"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:04:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"} {"level":"debug","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acabfdc05be02c326d64ac24b1cfe01cb9caf5fc1403873115a4f42d96d4f102","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"} {"level":"info","ts":"2026-07-17T08:04:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acabfdc05be02c326d64ac24b1cfe01cb9caf5fc1403873115a4f42d96d4f102"} {"level":"info","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49018","PortSpecifier":{"PortValue":49018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275469,"nanos":902104147},"http":{"id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/sub-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d34cc5f-065c-4c43-bdcc-16c92d482811","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34036","PortSpecifier":{"PortValue":34036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34036","PortSpecifier":{"PortValue":34036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275469,"nanos":945111806},"http":{"id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/sub-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09f4dc15-a1f2-4113-b6fc-2a03da41c253","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c787ef50-0541-4185-9766-3cee450e6163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49024","PortSpecifier":{"PortValue":49024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c787ef50-0541-4185-9766-3cee450e6163","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c787ef50-0541-4185-9766-3cee450e6163","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49024","PortSpecifier":{"PortValue":49024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275469,"nanos":984801329},"http":{"id":"c787ef50-0541-4185-9766-3cee450e6163","method":"GET","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wNpkthhkK1IAZfWz_QVpEG7rO8Ymj51orsgdHxPXwhdGTCvmsk9jmewTzZJ9"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wNpkthhkK1IAZfWz_QVpEG7rO8Ymj51orsgdHxPXwhdGTCvmsk9jmewTzZJ9\"}"} {"level":"debug","ts":"2026-07-17T08:04:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"75606586-848f-414c-982f-a35fa2210d73","keyName":"e2e-sub-iso-9b0e80","subscription":"e2e-a-only-bc70ad","tenant":"e2e-shared-a-d805bd","userId":"75606586-848f-414c-982f-a35fa2210d73","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c787ef50-0541-4185-9766-3cee450e6163","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/sub-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bc70ad"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c787ef50-0541-4185-9766-3cee450e6163","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c787ef50-0541-4185-9766-3cee450e6163","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c787ef50-0541-4185-9766-3cee450e6163","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34048","PortSpecifier":{"PortValue":34048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34048","PortSpecifier":{"PortValue":34048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275470,"nanos":29468161},"http":{"id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","method":"GET","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1sGE53vNPd4ljq5f_YHBJ9Mhg9ov87rdxxR3xauSaVnez5HTzazGxJHjVnPm"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1sGE53vNPd4ljq5f_YHBJ9Mhg9ov87rdxxR3xauSaVnez5HTzazGxJHjVnPm\"}"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c8287c2-b45b-4e31-9bde-9fb0d3442e87","keyName":"e2e-sub-iso-c2c0f6","subscription":"e2e-b-only-bc70ad","tenant":"e2e-shared-b-04d1db","userId":"2c8287c2-b45b-4e31-9bde-9fb0d3442e87","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/sub-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bc70ad"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c0f908d-e6bc-4049-898e-406dee0df1ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52344","PortSpecifier":{"PortValue":52344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52344","PortSpecifier":{"PortValue":52344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275488,"nanos":973163798},"http":{"id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/sub-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afe8d1a-15e4-4219-9f2d-3d9c7b014e81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45076","PortSpecifier":{"PortValue":45076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45076","PortSpecifier":{"PortValue":45076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275489,"nanos":12883808},"http":{"id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/sub-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"107cd7c9-c99a-4440-abe8-0fcdc4899c6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52356","PortSpecifier":{"PortValue":52356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275489,"nanos":47538462},"http":{"id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JakcHyzwshZnk0am_voGFifR2ovATsHtv4bH6afLalpJaQWiDextlBUNQnMh"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JakcHyzwshZnk0am_voGFifR2ovATsHtv4bH6afLalpJaQWiDextlBUNQnMh\"}"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b1350a1-39f0-49d3-9e8a-8b2804d7b7c4","keyName":"e2e-sub-iso-219de3","subscription":"e2e-shared-sub-d57062","tenant":"e2e-shared-a-d805bd","userId":"0b1350a1-39f0-49d3-9e8a-8b2804d7b7c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/sub-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d57062"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ae942c6-dd92-9afa-b80b-5c4eca8c6acf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45080","PortSpecifier":{"PortValue":45080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25667716-6035-4c30-86c3-80bd369bf2b8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45080","PortSpecifier":{"PortValue":45080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275489,"nanos":78027061},"http":{"id":"25667716-6035-4c30-86c3-80bd369bf2b8","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NAqfu6f37ykvcjUM_dJH5dPKO8fR6aZ5vv39CJIs2HxJ7u7f8QzeZBjyKsho"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NAqfu6f37ykvcjUM_dJH5dPKO8fR6aZ5vv39CJIs2HxJ7u7f8QzeZBjyKsho\"}"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76f5d697-bb72-499d-89fd-79729c607a2f","keyName":"e2e-sub-iso-4b4d76","subscription":"e2e-shared-sub-d57062","tenant":"e2e-shared-b-04d1db","userId":"76f5d697-bb72-499d-89fd-79729c607a2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/sub-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d57062"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:04:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25667716-6035-4c30-86c3-80bd369bf2b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf9ab6df9632aeeb982acc35ef37efb05e6863e3cc7adba37cf75d566101c2cc"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b528c4f3a1e327a1880a7885f8767508fb6827d2dc0cf500c4704475e896058f"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac2cd7d618e8b912febf3b5bc54ac909d9eb3a4b7b7de9248ea7e5c2210418d5"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/680b716d5855d2387f8068df54952528a2e7324c4c48aea48d54a545b47b5221"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/596368c80dcc4d16ff9f7c72e6f158e9eee3a9b2f5d0e4d4ae37a3512ddbe1d5"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65b0ebd099657314892bae4bfdf6cc289cc4b1b56f89d2cf1682cb64ed537172"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c47f73c9a7dec974f249cc66b242a2c2b1307b5c16ba5fb33d69732526be07"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d874c1ec2aa3b34a47dac34eaee8ee405bdb71d988e8019264badaaba28384e"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0b998952c65b6390d34851ce3508bf0b0ee6cdf24d508881da324dc8266d8f4"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8589b7a0c091edcc3005bf29fb3879cd2982cd8a120f535561584c35c39842da"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20659c0d5c43439eda77eb9c8cb201ed8643333b523f3963979f3a214a484da2"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c80a5e6ff9465237795e4856c2eaa8c5f283da24b9889abb99349215a35b8a2"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd1a2b621f700596431ac746d405c5f809f244b16bde79e58d3032009ccd98bd"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/555161bda9742f14fce81a94d28a45763358291289fe30ab75e93fa1c8a9c8ce"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46210f41110a9848610c4234179f8da306901467c209c52fd72361181c55042b"} {"level":"info","ts":"2026-07-17T08:04:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d8584b71a9cca942ecc3d780822c08c7858d6fe02a9933d33a45e651b584233"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"} {"level":"error","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"error","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"error","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"info","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acabfdc05be02c326d64ac24b1cfe01cb9caf5fc1403873115a4f42d96d4f102","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acabfdc05be02c326d64ac24b1cfe01cb9caf5fc1403873115a4f42d96d4f102"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd94f6b3e66efad072a64f84d51d9c6c0685d59d15cdab0a6cbaf14898d6ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd94f6b3e66efad072a64f84d51d9c6c0685d59d15cdab0a6cbaf14898d6ffa"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"794d5c53f071fc92a47a428f54c237fd7f0dd18dd4b279f3cd83b2ee2681622f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794d5c53f071fc92a47a428f54c237fd7f0dd18dd4b279f3cd83b2ee2681622f"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T08:05:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f6876afe20f0827320a99f0bedbdbc44ee4cdd3a59889b5a2f450b7cf1f0552","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"debug","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f6876afe20f0827320a99f0bedbdbc44ee4cdd3a59889b5a2f450b7cf1f0552"} {"level":"info","ts":"2026-07-17T08:05:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59038","PortSpecifier":{"PortValue":59038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59038","PortSpecifier":{"PortValue":59038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275555,"nanos":46676197},"http":{"id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb0d8476-f857-4430-9cef-2e9a53bb6d3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49836","PortSpecifier":{"PortValue":49836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49836","PortSpecifier":{"PortValue":49836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275555,"nanos":90463081},"http":{"id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649f20d0-bed8-4fc2-af91-f4990ba699fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59042","PortSpecifier":{"PortValue":59042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59042","PortSpecifier":{"PortValue":59042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275555,"nanos":135662408},"http":{"id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg\"}"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","subscription":"e2e-rate-iso-a-dd04ce","tenant":"e2e-shared-a-d805bd","userId":"ae73995b-9fe6-4333-8208-71573f98f3d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dd04ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd04ce"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","selected_subscription":"e2e-rate-iso-a-dd04ce","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dd04ce@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:05:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"314e9dfd-91f5-45cc-b0f5-dbabbd648aa3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59058","PortSpecifier":{"PortValue":59058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59058","PortSpecifier":{"PortValue":59058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275556,"nanos":199557985},"http":{"id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg\"}"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","subscription":"e2e-rate-iso-a-dd04ce","tenant":"e2e-shared-a-d805bd","userId":"ae73995b-9fe6-4333-8208-71573f98f3d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dd04ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd04ce"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","selected_subscription":"e2e-rate-iso-a-dd04ce","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dd04ce@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:05:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a935a45f-d09b-4c6e-88a0-c4cece69b3d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59060","PortSpecifier":{"PortValue":59060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59060","PortSpecifier":{"PortValue":59060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275557,"nanos":241554750},"http":{"id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RAjoTOrA6lROdcyd_2T8Eu2NhnKVh56Zu6p9Nw7ukKVCCbyLWau7qoEA4Ewg\"}"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","subscription":"e2e-rate-iso-a-dd04ce","tenant":"e2e-shared-a-d805bd","userId":"ae73995b-9fe6-4333-8208-71573f98f3d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dd04ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dd04ce"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ae73995b-9fe6-4333-8208-71573f98f3d4","keyName":"e2e-rate-a-dd04ce","selected_subscription":"e2e-rate-iso-a-dd04ce","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dd04ce@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dd04ce","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:05:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59011f4c-1fce-4ef4-ad35-a5906a1ada9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59074","PortSpecifier":{"PortValue":59074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275564,"nanos":166377550},"http":{"id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dec92b3-2f74-4c60-8d57-d7f36c822f08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49848","PortSpecifier":{"PortValue":49848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"257f82a2-5804-465f-aff6-bcde58c9ec61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49848","PortSpecifier":{"PortValue":49848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275564,"nanos":216865122},"http":{"id":"257f82a2-5804-465f-aff6-bcde58c9ec61","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"]}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7b308cd21af5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be576077-99f9-4026-b6cd-af4f585828cd"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b36a7f6b-ee2b-4040-8db3-5213f7708053","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257f82a2-5804-465f-aff6-bcde58c9ec61","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59084","PortSpecifier":{"PortValue":59084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275564,"nanos":259202738},"http":{"id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bef94d85-c7ad-4f3f-bb25-77926cb09c52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"485534bb-2e27-45ff-98db-458f90abe33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35060","PortSpecifier":{"PortValue":35060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"485534bb-2e27-45ff-98db-458f90abe33f","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"485534bb-2e27-45ff-98db-458f90abe33f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35060","PortSpecifier":{"PortValue":35060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275565,"nanos":297850421},"http":{"id":"485534bb-2e27-45ff-98db-458f90abe33f","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"485534bb-2e27-45ff-98db-458f90abe33f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"485534bb-2e27-45ff-98db-458f90abe33f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"485534bb-2e27-45ff-98db-458f90abe33f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"485534bb-2e27-45ff-98db-458f90abe33f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35076","PortSpecifier":{"PortValue":35076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35076","PortSpecifier":{"PortValue":35076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275566,"nanos":340146395},"http":{"id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fa64d3-dae9-4011-970f-4bd35e467ce3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35088","PortSpecifier":{"PortValue":35088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35088","PortSpecifier":{"PortValue":35088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275567,"nanos":380035510},"http":{"id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44596ea1-b6da-4444-9bc0-adc45b0a3a7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35104","PortSpecifier":{"PortValue":35104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35104","PortSpecifier":{"PortValue":35104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275568,"nanos":417589700},"http":{"id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6317d0a1-fb2e-4a64-81f6-ddc46a75e3ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35108","PortSpecifier":{"PortValue":35108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f5b9616-77b1-45d1-adb5-b5811354446a","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35108","PortSpecifier":{"PortValue":35108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275569,"nanos":455108044},"http":{"id":"7f5b9616-77b1-45d1-adb5-b5811354446a","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5b9616-77b1-45d1-adb5-b5811354446a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35118","PortSpecifier":{"PortValue":35118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35118","PortSpecifier":{"PortValue":35118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275570,"nanos":501322475},"http":{"id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c5f5777-372f-492a-b4d6-04f96baba9c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35132","PortSpecifier":{"PortValue":35132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35132","PortSpecifier":{"PortValue":35132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275571,"nanos":536538320},"http":{"id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8c60c95-dfcc-4a56-8183-c3007708df6f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645bf9cc-2630-447a-b430-8a980777ba94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35144","PortSpecifier":{"PortValue":35144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"645bf9cc-2630-447a-b430-8a980777ba94","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"645bf9cc-2630-447a-b430-8a980777ba94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35144","PortSpecifier":{"PortValue":35144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275572,"nanos":573543917},"http":{"id":"645bf9cc-2630-447a-b430-8a980777ba94","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"645bf9cc-2630-447a-b430-8a980777ba94","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"645bf9cc-2630-447a-b430-8a980777ba94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645bf9cc-2630-447a-b430-8a980777ba94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"645bf9cc-2630-447a-b430-8a980777ba94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35160","PortSpecifier":{"PortValue":35160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35160","PortSpecifier":{"PortValue":35160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275573,"nanos":616831742},"http":{"id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26ccfae-4366-4e5f-82bd-b5eccb8cdf95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6b46e63-73cf-4c60-9624-811430d284eb","method":"POST","path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions","host":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275574,"nanos":652657056},"http":{"id":"a6b46e63-73cf-4c60-9624-811430d284eb","method":"POST","headers":{":authority":"e2e-shared-a-d805bd.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LWFXGxHcb79X57S5_cg1iWS7jniPjXZVAcEM47iEMS1G4EhNMrDHXsDqhowU\"}"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","subscription":"e2e-rate-iso-a-dcc919","tenant":"e2e-shared-a-d805bd","userId":"539fac9b-3aef-4e39-825e-4176c69e473b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\",\"requestedSubscription\":\"e2e-rate-iso-a-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d805bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d805bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"539fac9b-3aef-4e39-825e-4176c69e473b","keyName":"e2e-rate-a-dcc919","selected_subscription":"e2e-rate-iso-a-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-a-d805bd/e2e-rate-iso-a-dcc919@ai-tenant-e2e-shared-a-d805bd/rate-test-model-d805bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d805bd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dcc919","namespace":"ai-tenant-e2e-shared-a-d805bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b46e63-73cf-4c60-9624-811430d284eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","method":"POST","path":"/ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db/v1/completions","host":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55230","PortSpecifier":{"PortValue":55230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784275574,"nanos":693775772},"http":{"id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","method":"POST","headers":{":authority":"e2e-shared-b-04d1db.apps.040bd9ef-16b3-4a00-87c9-7b308cd21af5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8NSXRu3brNBSsvgE_qWmn7gJl9NR1xZ8JX5GiOy4rAyNDlZ6CHjuwoxYeoWf"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8NSXRu3brNBSsvgE_qWmn7gJl9NR1xZ8JX5GiOy4rAyNDlZ6CHjuwoxYeoWf\"}"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c75d27a9-c28c-4463-a0ef-b5645849815c","keyName":"e2e-rate-b-dcc919","subscription":"e2e-rate-iso-b-dcc919","tenant":"e2e-shared-b-04d1db","userId":"c75d27a9-c28c-4463-a0ef-b5645849815c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db\",\"requestedSubscription\":\"e2e-rate-iso-b-dcc919\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-04d1db.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-04d1db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dcc919","namespace":"ai-tenant-e2e-shared-b-04d1db","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-04d1db/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dcc919"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c75d27a9-c28c-4463-a0ef-b5645849815c","keyName":"e2e-rate-b-dcc919","selected_subscription":"e2e-rate-iso-b-dcc919","selected_subscription_key":"ai-tenant-e2e-shared-b-04d1db/e2e-rate-iso-b-dcc919@ai-tenant-e2e-shared-b-04d1db/rate-test-model-04d1db","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-04d1db","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dcc919","namespace":"ai-tenant-e2e-shared-b-04d1db","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T08:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b75f148f-c6bf-4fec-9f05-b0aaf9cf19db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7563bfe0eb9857da370cef83dcc23200a36d55cbb0468fbeff8eaf0abd355d1f"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219c714f399582470dc8fd20f71987c14a2cf31a40c1d3489c17e83e1592d14a"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bae284cfaa15a0ad53920f54c3262f3a93a1896adb4ef054894fe50b4d690047"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/712303159bfdbd6b7cb8906188aa371c8495b8664ed15ed755e5c808007c35d3"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/793bd3646e863dbdd283f431aac57762aa927c888f79001de7447ef17cb391c0"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb96f10f96d01af9f870408460bb323502da5d73b372068ed77ee63552075f4c"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f5d5ad2ec0fc50b9468b27fe7e53c8a7baf6af8731d0187f0ecfd47b3bb16ae"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e2e08145531251ac6ec1599f4ee599b706f4fbdabeafd97f939763d16530660"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f03c3f94877a4aa96e69947428fbc0ad22ebceb67a242859ce442759372ecdb"} {"level":"info","ts":"2026-07-17T08:06:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cfef67e51149247960a50bf2c8a3fb466b709a9c072191748c77cb42cff7c92"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6bb8fee326530b874d198c136530ccde749f029fe5e695b66fce445f693facc"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6bcbded5c33d8b44a9e0022e9d7eab5e1d5782892b1c9bb97c6a576b1d463da"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49f72471be66fef472af719f11087c613fba5e8e12a3bc6d46d1660267c502fa"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1f2f53749e3e2233cf174f99b148082f04f0e67c40e884b1d83f1ddb17fcaf1"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1ec2e8742a0235f171402aa129700643a8d9aa38c3e92c8e313f5849beb996e"} {"level":"info","ts":"2026-07-17T08:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c11395e0316d37a804feb9f7b27cabed969b94d9ec2f1057a1ca5caa30397a3c"} {"level":"info","ts":"2026-07-17T08:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b3cb70c6aa86ccf619010c54738409e6b1c4780bad99f28880ead48b48a38bb"} {"level":"info","ts":"2026-07-17T08:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f6876afe20f0827320a99f0bedbdbc44ee4cdd3a59889b5a2f450b7cf1f0552"} {"level":"info","ts":"2026-07-17T08:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acabfdc05be02c326d64ac24b1cfe01cb9caf5fc1403873115a4f42d96d4f102"} {"level":"info","ts":"2026-07-17T08:06:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/794d5c53f071fc92a47a428f54c237fd7f0dd18dd4b279f3cd83b2ee2681622f"} {"level":"info","ts":"2026-07-17T08:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af6c07b192c01678785a38a5120036094ebd15017c2d98e73d5469300457dbed"} {"level":"info","ts":"2026-07-17T08:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd94f6b3e66efad072a64f84d51d9c6c0685d59d15cdab0a6cbaf14898d6ffa"} {"level":"info","ts":"2026-07-17T08:07:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28d884183b790e86c90679af42b485d7cd4ce685f1da6e2c18a871f9c88f449a"} {"level":"info","ts":"2026-07-17T08:07:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d198b1b18182f78a1911aaef6fdf548f596838d9a03f305654a69251afa88ae3"}