--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-10T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eacb8139fa3671e55f6e89ba7cb8357a0aeb7b6d70056fbae470ba806f7f9c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eacb8139fa3671e55f6e89ba7cb8357a0aeb7b6d70056fbae470ba806f7f9c2"} {"level":"info","ts":"2026-07-10T18:37:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05cb71674df3a7b646c280434b29c282eba105421e3321b3ad12094d6f843710"} {"level":"info","ts":"2026-07-10T18:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38bac27c0e7a46ee62314c8abe4a55aab7acf45d8a63d62ab4b8d125dde355f4"} {"level":"info","ts":"2026-07-10T18:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8ef1f383ff4db23fd52a25b27215bbea89948da0df1ab73446664b2a19aabab"} {"level":"info","ts":"2026-07-10T18:37:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/275772bcec59b2489a349b529cfcae280843b9c7ee28e682495baaf6af72d711"} {"level":"info","ts":"2026-07-10T18:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d97a89c85962f75904c7b4d0c20772380417674aa3b3019090f65359ab66328f"} {"level":"info","ts":"2026-07-10T18:37:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b9302ff5cd862c2d635420f1dbe0f55114712f4c16d51a97fd5d2f1688b432e"} {"level":"info","ts":"2026-07-10T18:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38e88c6a9f77f7c1f3d85b04280590ce73d6803a9a421877298e5ea0654239be"} {"level":"info","ts":"2026-07-10T18:37:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eacb8139fa3671e55f6e89ba7cb8357a0aeb7b6d70056fbae470ba806f7f9c2"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"} {"level":"error","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"info","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"error","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775"} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"} {"level":"info","ts":"2026-07-10T18:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49800","PortSpecifier":{"PortValue":49800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708746,"nanos":536459963},"http":{"id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec5d6776-9956-4c18-8297-3ebfbfa716d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36510","PortSpecifier":{"PortValue":36510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36510","PortSpecifier":{"PortValue":36510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708746,"nanos":594941594},"http":{"id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7df5d23-4105-4fdc-bf54-f216b20a90b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"838504d8-a0b2-47df-ad85-ea16074e1b22","method":"GET","path":"/maas-api/v1/api-keys/86d32b7e-800b-4b4f-9c9e-fbae4509ec4b","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708746,"nanos":652460780},"http":{"id":"838504d8-a0b2-47df-ad85-ea16074e1b22","method":"GET","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/86d32b7e-800b-4b4f-9c9e-fbae4509ec4b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/86d32b7e-800b-4b4f-9c9e-fbae4509ec4b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"838504d8-a0b2-47df-ad85-ea16074e1b22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36522","PortSpecifier":{"PortValue":36522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8fba49c-5a1c-427f-897f-6ae01666a812","method":"GET","path":"/maas-api/v1/api-keys/43e3c4a7-da9b-441e-a895-bcb4c3a6f7e1","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36522","PortSpecifier":{"PortValue":36522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708746,"nanos":687984709},"http":{"id":"b8fba49c-5a1c-427f-897f-6ae01666a812","method":"GET","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43e3c4a7-da9b-441e-a895-bcb4c3a6f7e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/43e3c4a7-da9b-441e-a895-bcb4c3a6f7e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8fba49c-5a1c-427f-897f-6ae01666a812","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"070220e8-c24d-9ad6-ba2f-707067c735ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708761,"nanos":524327639},"http":{"id":"070220e8-c24d-9ad6-ba2f-707067c735ed","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"070220e8-c24d-9ad6-ba2f-707067c735ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48248","PortSpecifier":{"PortValue":48248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708761,"nanos":564729211},"http":{"id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff702ea4-9adc-4d27-adf0-92cb01e7b867","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37018","PortSpecifier":{"PortValue":37018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708761,"nanos":602075506},"http":{"id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","method":"GET","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U4mNfbXQd00i0HGj_EvqIgHq4serMGxiomFWgHOZu1NWRL3eT3KuoPuoF484"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U4mNfbXQd00i0HGj_EvqIgHq4serMGxiomFWgHOZu1NWRL3eT3KuoPuoF484\"}"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"941ec28f-ebfb-4f4e-960d-3deb15bf3fc9","keyName":"e2e-auth-iso-a-609262","subscription":"e2e-auth-iso-5aed70","tenant":"e2e-shared-a-319db5","userId":"941ec28f-ebfb-4f4e-960d-3deb15bf3fc9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5aed70"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9cdbb10-9dc7-45a2-a806-0cae29a142e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28529864-5ecb-4d76-b115-4926f6045478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48542","PortSpecifier":{"PortValue":48542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28529864-5ecb-4d76-b115-4926f6045478","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28529864-5ecb-4d76-b115-4926f6045478","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48542","PortSpecifier":{"PortValue":48542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708776,"nanos":418953916},"http":{"id":"28529864-5ecb-4d76-b115-4926f6045478","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28529864-5ecb-4d76-b115-4926f6045478","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28529864-5ecb-4d76-b115-4926f6045478","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28529864-5ecb-4d76-b115-4926f6045478","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28529864-5ecb-4d76-b115-4926f6045478","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28529864-5ecb-4d76-b115-4926f6045478","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57094","PortSpecifier":{"PortValue":57094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3777590-fdcc-4857-afb0-1155943a4b3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57094","PortSpecifier":{"PortValue":57094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708776,"nanos":453874834},"http":{"id":"a3777590-fdcc-4857-afb0-1155943a4b3e","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3777590-fdcc-4857-afb0-1155943a4b3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f993276a-1135-498d-ae7c-d626d9b03788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57098","PortSpecifier":{"PortValue":57098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f993276a-1135-498d-ae7c-d626d9b03788","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f993276a-1135-498d-ae7c-d626d9b03788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57098","PortSpecifier":{"PortValue":57098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708776,"nanos":488163441},"http":{"id":"f993276a-1135-498d-ae7c-d626d9b03788","method":"GET","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f993276a-1135-498d-ae7c-d626d9b03788","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pKjeTJCMlP9AKfU3_x0iVVLpHBRqWH2BCZZTEXTRP8LYPs5MznPaYdy07TtX"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f993276a-1135-498d-ae7c-d626d9b03788","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pKjeTJCMlP9AKfU3_x0iVVLpHBRqWH2BCZZTEXTRP8LYPs5MznPaYdy07TtX\"}"} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f993276a-1135-498d-ae7c-d626d9b03788","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f993276a-1135-498d-ae7c-d626d9b03788","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f993276a-1135-498d-ae7c-d626d9b03788","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f993276a-1135-498d-ae7c-d626d9b03788","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f993276a-1135-498d-ae7c-d626d9b03788","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T18:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f993276a-1135-498d-ae7c-d626d9b03788","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:50404","PortSpecifier":{"PortValue":50404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:50404","PortSpecifier":{"PortValue":50404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708793,"nanos":365716601},"http":{"id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94bb39d1-828f-49c2-adb0-4c37f8a8e5fa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45568","PortSpecifier":{"PortValue":45568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45568","PortSpecifier":{"PortValue":45568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708793,"nanos":399978117},"http":{"id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77d4f285-0ca8-4e92-88bf-df2e1761ae01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:50410","PortSpecifier":{"PortValue":50410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:50410","PortSpecifier":{"PortValue":50410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708793,"nanos":431205201},"http":{"id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"361784ef-8a17-4e87-8dd4-f018f2aac76f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45582","PortSpecifier":{"PortValue":45582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:45582","PortSpecifier":{"PortValue":45582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708793,"nanos":465472703},"http":{"id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cf590be-7713-4ad2-9eb6-6db24e51302e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49646","PortSpecifier":{"PortValue":49646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7451e773-3bad-420c-a6e9-4a7461c48be1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49646","PortSpecifier":{"PortValue":49646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708812,"nanos":529304422},"http":{"id":"7451e773-3bad-420c-a6e9-4a7461c48be1","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7451e773-3bad-420c-a6e9-4a7461c48be1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43918","PortSpecifier":{"PortValue":43918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43918","PortSpecifier":{"PortValue":43918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708812,"nanos":568524590},"http":{"id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de5d2b6-d01d-4db5-bf4b-0a4e0ed80861","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a26048-1bab-4577-9469-ef424997b798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43928","PortSpecifier":{"PortValue":43928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a26048-1bab-4577-9469-ef424997b798","method":"GET","path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a26048-1bab-4577-9469-ef424997b798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43928","PortSpecifier":{"PortValue":43928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708812,"nanos":603897954},"http":{"id":"45a26048-1bab-4577-9469-ef424997b798","method":"GET","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45a26048-1bab-4577-9469-ef424997b798","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a26048-1bab-4577-9469-ef424997b798","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a26048-1bab-4577-9469-ef424997b798","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a26048-1bab-4577-9469-ef424997b798","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a26048-1bab-4577-9469-ef424997b798","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49660","PortSpecifier":{"PortValue":49660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","method":"GET","path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49660","PortSpecifier":{"PortValue":49660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708812,"nanos":641226146},"http":{"id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","method":"GET","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3af8320a-7487-4a71-8153-fa4aeddbbff5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c2a235a-966c-4a08-99f7-95c52b7ff69d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47866","PortSpecifier":{"PortValue":47866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47866","PortSpecifier":{"PortValue":47866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708833,"nanos":810689949},"http":{"id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb0fea84-ad66-49a2-97c4-73ed10e27619","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55244","PortSpecifier":{"PortValue":55244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d799de6-1bb0-466f-b003-7649b7a59382","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55244","PortSpecifier":{"PortValue":55244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708833,"nanos":843822791},"http":{"id":"6d799de6-1bb0-466f-b003-7649b7a59382","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/auth-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d799de6-1bb0-466f-b003-7649b7a59382","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47876","PortSpecifier":{"PortValue":47876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:47876","PortSpecifier":{"PortValue":47876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708833,"nanos":882570493},"http":{"id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4KfW17EfNzVtpFVj_xBV7VxDAio3Hl4gpVExZzOVa9Wf7Q8FkUvqDJyg4FOP"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4KfW17EfNzVtpFVj_xBV7VxDAio3Hl4gpVExZzOVa9Wf7Q8FkUvqDJyg4FOP\"}"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2029a18c-db8f-4713-bfed-db8aea4e83fa","keyName":"e2e-auth-iso-a-4d04d3","subscription":"e2e-auth-iso-029de0","tenant":"e2e-shared-a-319db5","userId":"2029a18c-db8f-4713-bfed-db8aea4e83fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/auth-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-029de0"} {"level":"info","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a831b7ef-4a9b-49c9-af23-5c3bc5abeda7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08c0ef81fbde5b8e32747643a3bd7628f7052808c0dab590d6ec5f429c7e60a3"} {"level":"info","ts":"2026-07-10T18:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acc2885938b65bf28ab5c728ffe9db9ff3f2ca59da17b98da974f11b4fef082e"} {"level":"info","ts":"2026-07-10T18:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d6f805625d480f783fc9496b119278d70797f2051ad8abc515749d3d0411b7d"} {"level":"info","ts":"2026-07-10T18:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/097ca561d0c533f6968c96b839577f137687b9062549d4e9b5bd7745ad0bfe17"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/870972823e1bf2dbdb6912ac4296dcfa4725b53e4b0a47db4cd8e52cf9971ee1"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73debaa34793819804761186ce26eb9be075577436c8b9417e4459932804a70d"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8491a9af888b9f2d4d232ace29e7e691ec35c41a2bcc6c460e87256515d1794e"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67d6c491b40f0afc6931ccc1242770b2f7a6d528c0cd407749fb7c49b0cc50d8"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5300ccb0481ceac3a2aad10a5426da1c0c1c46fb0eb44fd7cb152c72015468b"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/075eded6df3d56d600588ca72f95872628b7a33ac4d173e4fbfa6b0c84cc0775"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79688205e8277fd232880de7373fafa0fdbfb2c0fbfde40fbc3e7aa294c53606"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9260a20cd490a3bccc8323e603cceb09817f078bb9af5b3bcdfe86ebfa4cf984"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a42d4419614ca8516def8da4a83f86a6d7ad27176abf38062afb79c4ae0cabbb"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebc1f49d2793a408444c24daf4bd9963acc99c59f75e2b7a39e07e1e5ecedf6e"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1b98b20f2b785012e4214d8c3f3d197f60db4779dad8e096d24d6e3ee6f8256"} {"level":"info","ts":"2026-07-10T18:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38409bfeaf5a15e8c5426b12d9e74d38367ed75e1649429535a297b24e090f64"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"info","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"error","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"debug","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"} {"level":"info","ts":"2026-07-10T18:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"info","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"error","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"debug","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"error","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:41:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"} {"level":"debug","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"} {"level":"info","ts":"2026-07-10T18:41:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"info","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48472","PortSpecifier":{"PortValue":48472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708914,"nanos":979827028},"http":{"id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/sub-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:41:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84e6fb4b-8979-41aa-bbe1-1e6f6e909c09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46982","PortSpecifier":{"PortValue":46982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46982","PortSpecifier":{"PortValue":46982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708915,"nanos":21148044},"http":{"id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/sub-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207c0720-d670-4b40-b5ed-e0c58bcd71a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48476","PortSpecifier":{"PortValue":48476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48476","PortSpecifier":{"PortValue":48476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708915,"nanos":63904584},"http":{"id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","method":"GET","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qIhm3uvBJxtCZKFX_bHx2oAu33vjNmOVWWUd9fVxacQZse8lUQPO5ocBrpQ3"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qIhm3uvBJxtCZKFX_bHx2oAu33vjNmOVWWUd9fVxacQZse8lUQPO5ocBrpQ3\"}"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7e8a0ff4-6075-4a7e-8d0e-53e8ae8c4af1","keyName":"e2e-sub-iso-f08e7d","subscription":"e2e-a-only-b3358e","tenant":"e2e-shared-a-319db5","userId":"7e8a0ff4-6075-4a7e-8d0e-53e8ae8c4af1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/sub-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b3358e"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6f5f10-1b43-4588-919a-06bb0b55c27f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db16933-f8c6-42d3-9156-112400780580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46996","PortSpecifier":{"PortValue":46996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db16933-f8c6-42d3-9156-112400780580","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db16933-f8c6-42d3-9156-112400780580","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:46996","PortSpecifier":{"PortValue":46996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708915,"nanos":108540600},"http":{"id":"0db16933-f8c6-42d3-9156-112400780580","method":"GET","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UlqOI3BvfrPcKvH9_rT58rJI1LXIJirDZQuzJEd29oWJY0oEa6K8wGIh5Q8X"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0db16933-f8c6-42d3-9156-112400780580","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UlqOI3BvfrPcKvH9_rT58rJI1LXIJirDZQuzJEd29oWJY0oEa6K8wGIh5Q8X\"}"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"698d5464-850b-4a50-a969-68fcd3db30b4","keyName":"e2e-sub-iso-af963e","subscription":"e2e-b-only-b3358e","tenant":"e2e-shared-b-4cfdb5","userId":"698d5464-850b-4a50-a969-68fcd3db30b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db16933-f8c6-42d3-9156-112400780580","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/sub-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b3358e"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db16933-f8c6-42d3-9156-112400780580","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db16933-f8c6-42d3-9156-112400780580","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:41:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db16933-f8c6-42d3-9156-112400780580","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"917efbe9-4729-451c-b0b3-f062ab383f3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708924,"nanos":949060188},"http":{"id":"917efbe9-4729-451c-b0b3-f062ab383f3e","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/sub-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"917efbe9-4729-451c-b0b3-f062ab383f3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49210","PortSpecifier":{"PortValue":49210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0da6372c-6bad-4688-85ce-8163c2a5354e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49210","PortSpecifier":{"PortValue":49210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708924,"nanos":982093072},"http":{"id":"0da6372c-6bad-4688-85ce-8163c2a5354e","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/sub-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da6372c-6bad-4688-85ce-8163c2a5354e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40288","PortSpecifier":{"PortValue":40288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40288","PortSpecifier":{"PortValue":40288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708925,"nanos":16555665},"http":{"id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eiBBdyVeME1dPV9K_VC4TVy3MFn2BPoWiubIADIuZRxQaauKujGvn5BTPpRA"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eiBBdyVeME1dPV9K_VC4TVy3MFn2BPoWiubIADIuZRxQaauKujGvn5BTPpRA\"}"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"daa71182-4c82-4a5b-b020-5176d21097aa","keyName":"e2e-sub-iso-10fbb5","subscription":"e2e-shared-sub-ae82e3","tenant":"e2e-shared-a-319db5","userId":"daa71182-4c82-4a5b-b020-5176d21097aa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/sub-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ae82e3"} {"level":"info","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64d6a39c-245a-46d5-b7b3-6479a329cf09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49218","PortSpecifier":{"PortValue":49218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:49218","PortSpecifier":{"PortValue":49218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783708925,"nanos":48495105},"http":{"id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sIRUI7YbJYYsXZD1_BJP2Wzv2d1GGnb2U32KxGwf8zGeDEx43jdg94ZiSELS"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sIRUI7YbJYYsXZD1_BJP2Wzv2d1GGnb2U32KxGwf8zGeDEx43jdg94ZiSELS\"}"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1cafa4f6-d22d-4a04-a7c7-59ff0afa55a2","keyName":"e2e-sub-iso-8860d1","subscription":"e2e-shared-sub-ae82e3","tenant":"e2e-shared-b-4cfdb5","userId":"1cafa4f6-d22d-4a04-a7c7-59ff0afa55a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/sub-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ae82e3"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:42:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd913099-0d2c-4d38-9a0c-284f0a9f7c17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c52b1e68baa4549d4615ec859c2213c4fb9291c33b3484b0fa9110097b35eaee"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9426640f2b5f650efc157c41fe72ae4b4605b02659c4834d5a851d448a77dd4"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e4f561e71800042cfbf96fa353a9956b5264a189f548e0afcda4718e678bbc"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26cadce9ce285395fbeea66f81d184fa78347f2f949b62d3ba319dc0448e161b"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb997f16f26abe23ae4c573a8a5a7944762562a5579fd357ea5cd44cf5b0c76a"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdbf743276e91c7ce9f7d7d889eb6b306d568fc95d693f0b48480fe20f850e64"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a3d69cd94d06a0a74b44683c718bcf220bffd1b4eafdb961e2fad516d0585a7"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f10e32f128d87d9a77dd04c1cba2a8b566344391025cc9e53f9365067ac8af6"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1405211f29f269c4f84b08510c2db5dadae288c41f5b6d7b06391587a35bf6dd"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe5edb89645b9db615757e7d03c9592bf8334bc330c89dc36ecc597b537b61a"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63a18bce51a84bcd462db62365005bcc52861fac61292ef5001f67536ee0efb5"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/429937e0facc2531c63c559f4764883c90779340739d7f0005d753bd84d0f19e"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/360fed33e2a1eea4925667aadbbf0a2092e731d08b8d978ea02ccd991da4b00c"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b1f62ad5b4ed204aaf79ece8d6a547345881612440c505bfc03b822fc3d79d2"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de69cc657ff2d4d4476a3771841fbe595f45d60bebb41cd8a255015ade0dc10e"} {"level":"info","ts":"2026-07-10T18:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5438ab82b4315dd34f66dda486533e97f95b10c8afd260a90b1f2d6247d47dcf"} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:42:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:42:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:42:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:42:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"debug","ts":"2026-07-10T18:43:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"info","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"error","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"error","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"error","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"} {"level":"debug","ts":"2026-07-10T18:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"error","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T18:43:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T18:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010890da-e441-4dcc-aeba-f164aa94772b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"010890da-e441-4dcc-aeba-f164aa94772b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"010890da-e441-4dcc-aeba-f164aa94772b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33154","PortSpecifier":{"PortValue":33154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":620019544},"http":{"id":"010890da-e441-4dcc-aeba-f164aa94772b","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"010890da-e441-4dcc-aeba-f164aa94772b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"010890da-e441-4dcc-aeba-f164aa94772b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"010890da-e441-4dcc-aeba-f164aa94772b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"010890da-e441-4dcc-aeba-f164aa94772b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":667165425},"http":{"id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b18b25-b5f6-4773-be1d-728a9c29fe64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33170","PortSpecifier":{"PortValue":33170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709010,"nanos":719612028},"http":{"id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1283d6bd-c6e9-9a85-9e76-4037df392dc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33180","PortSpecifier":{"PortValue":33180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be02ad7a-7427-4688-9015-13a11cf5794a","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33180","PortSpecifier":{"PortValue":33180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709011,"nanos":786426409},"http":{"id":"be02ad7a-7427-4688-9015-13a11cf5794a","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be02ad7a-7427-4688-9015-13a11cf5794a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6614a016-5866-429c-aab6-d9a68a7acaa9","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709012,"nanos":826001074},"http":{"id":"6614a016-5866-429c-aab6-d9a68a7acaa9","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BfYZSDQ85YJGlRz_FwRyjjY7j7waDeGJxQwzJ220xsiJheeaO7IjWmCu7ve\"}"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","subscription":"e2e-rate-iso-a-4235f8","tenant":"e2e-shared-a-319db5","userId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-4235f8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4235f8"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fe7c81a2-cb19-4ffb-b896-ece5995b3759","keyName":"e2e-rate-a-4235f8","selected_subscription":"e2e-rate-iso-a-4235f8","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-4235f8@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4235f8","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6614a016-5866-429c-aab6-d9a68a7acaa9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":794264838},"http":{"id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2545a75-edf7-4198-a18c-8ae229b00bd9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78addb6b-0f88-4612-b62d-398e7271deca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78addb6b-0f88-4612-b62d-398e7271deca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78addb6b-0f88-4612-b62d-398e7271deca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34716","PortSpecifier":{"PortValue":34716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":831024173},"http":{"id":"78addb6b-0f88-4612-b62d-398e7271deca","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78addb6b-0f88-4612-b62d-398e7271deca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"]}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78addb6b-0f88-4612-b62d-398e7271deca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee69ac2f84b2"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e1cea86f-5fb7-47b2-9832-1d4ef4494440"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3230db41-7b22-401f-a85b-9effb4f2a51f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78addb6b-0f88-4612-b62d-398e7271deca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78addb6b-0f88-4612-b62d-398e7271deca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709027,"nanos":868851300},"http":{"id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e37122-1cda-48be-b0ed-e35e0e1bf31a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57230","PortSpecifier":{"PortValue":57230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57230","PortSpecifier":{"PortValue":57230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709028,"nanos":909267903},"http":{"id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"face42fd-32b5-44ca-a9cb-25cd4a87945d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"936475fe-c761-4bbe-98c0-7e1d03eed122","method":"POST","path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions","host":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709029,"nanos":947357303},"http":{"id":"936475fe-c761-4bbe-98c0-7e1d03eed122","method":"POST","headers":{":authority":"e2e-shared-a-319db5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SM8Fa1jCsK0Nt3yw_5ipRT0MOPzaoVOTbca6tAcxy5gsSYxiOqZoMLliviiY\"}"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","subscription":"e2e-rate-iso-a-bd1a85","tenant":"e2e-shared-a-319db5","userId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\",\"requestedSubscription\":\"e2e-rate-iso-a-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-319db5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd1a85"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fb8145d8-6768-4bcc-87c8-da1b497b44c9","keyName":"e2e-rate-a-bd1a85","selected_subscription":"e2e-rate-iso-a-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-a-319db5/e2e-rate-iso-a-bd1a85@ai-tenant-e2e-shared-a-319db5/rate-test-model-319db5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-319db5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd1a85","namespace":"ai-tenant-e2e-shared-a-319db5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"936475fe-c761-4bbe-98c0-7e1d03eed122","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34718","PortSpecifier":{"PortValue":34718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","method":"POST","path":"/ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5/v1/completions","host":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34718","PortSpecifier":{"PortValue":34718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783709029,"nanos":983629246},"http":{"id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","method":"POST","headers":{":authority":"e2e-shared-b-4cfdb5.apps.a790da6b-12ee-4329-8c0c-ee69ac2f84b2.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3XHD60LFGWP2DhAc_Rix0sv6KxsygZAr71hBkZPZf2ax2FrIHRwNhcLUkMDA"} {"level":"debug","ts":"2026-07-10T18:43:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3XHD60LFGWP2DhAc_Rix0sv6KxsygZAr71hBkZPZf2ax2FrIHRwNhcLUkMDA\"}"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"373db54f-d556-4840-8b79-bb25e2fba003","keyName":"e2e-rate-b-bd1a85","subscription":"e2e-rate-iso-b-bd1a85","tenant":"e2e-shared-b-4cfdb5","userId":"373db54f-d556-4840-8b79-bb25e2fba003","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\",\"requestedSubscription\":\"e2e-rate-iso-b-bd1a85\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-4cfdb5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-4cfdb5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd1a85","namespace":"ai-tenant-e2e-shared-b-4cfdb5","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bd1a85"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"373db54f-d556-4840-8b79-bb25e2fba003","keyName":"e2e-rate-b-bd1a85","selected_subscription":"e2e-rate-iso-b-bd1a85","selected_subscription_key":"ai-tenant-e2e-shared-b-4cfdb5/e2e-rate-iso-b-bd1a85@ai-tenant-e2e-shared-b-4cfdb5/rate-test-model-4cfdb5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-4cfdb5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd1a85","namespace":"ai-tenant-e2e-shared-b-4cfdb5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T18:43:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94afa8ee-30d5-9e70-862f-f785400fe5d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43e83809d4ed0dd0effb8801d9e9965491b1b92dd93c7dadce09a4d23aef4581"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2ce878eb082ea88aea3b60166aaaaafa721455b32061926709cbbab069ab86c"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d5523950f7a8b1694c0aa1d10df690c5ee18b847dcc60553330d4d10e76b5f9"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422d949c2ac4610b1066815a1d75155e013b0e01bd82d0086077eb1fa825e6b6"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a275a16ce891f9c18a41119ea95e87af5bc77d23b38286fb4a6aa450d07205d"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cf1c6819ae7c25c2abea6bdc030a62145f24c328c4270f1fa3157a0758fa8ef"} {"level":"info","ts":"2026-07-10T18:44:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df00be2ca496efd31892ba3a8cc18f3b616a67f771115daa25d3195449bcceb5"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4cd9d3b64f17167b3d4020bf440a05df044fada27b18db22707bc13cf9707b9"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7826ccff5959ed88e1ad864365923ab8408396781429e06bd941d50ac4b9038b"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eec7ae1cc3a639bd75f80e8332735a8220b2bec5a896ac1d987ab938d6c3aebf"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27d01b7d0e8d8dce31457aea6f2a192028a02ea3bc49b1410dd00c28fce2d2d4"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d57d7dce3ca363e4d4786c862e7fea7b46d4c1b2826f38b3a855eb2eef9524f"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bce43b782c09d9c3a21a9fa3c2e53b39badfd9138a32d65210e0b711f40af99"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388564113bcb20f8dbb548783c3713ceb015064c6f49b962c17b25eedded7b05"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb77238f4be15ed10f9f06a7a4b8056ccb46fcce540b347e167694202b73fb4e"} {"level":"info","ts":"2026-07-10T18:44:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f98b400301d385e0d925709227c021d2fb509b491687fef3ab92b113e189b4"} {"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175685b5d45bc64baf84a3733338735c726121bf7add7e0a7abb9c5c3336fa64"} {"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06451d1483b2ad27b6cbdcbdd38dece83b84f7ed9766c772262c529acdb395f8"} {"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dbc8fcaaedb54900066118ee93ca8d4e5deef81394b7860da3487b93ec5352e"} {"level":"info","ts":"2026-07-10T18:44:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4888dc7af05f7a917ce1af7f151ef547ba49be8f69fa144c55faa539b0a57fd3"} {"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941e46f44da978540675496081076cf05e7b3c6021bb5d0d7632ca977b7368f6"} {"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50e21e2e618b7b809a62949b14fe5281ea25b6ef32a4c473efcc4ee6288c2246"} {"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692d6ded4863cc9cc81a5c5cb69a82e2467da0a20089b3425a11d6708d9817a2"} {"level":"info","ts":"2026-07-10T18:44:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dad0d44097a7813e8c485b3b061ca1169c0c4afc6fe61bc64869dac6118d1225"}