--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"error","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60872","PortSpecifier":{"PortValue":60872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d569495d-ca1b-47ca-a265-772c0e67eda5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","object":"source:{address:{socket_address:{address:\"10.132.0.12:60872\" port_value:60872}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547680 nanos:365841632} http:{id:\"d569495d-ca1b-47ca-a265-772c0e67eda5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d569495d-ca1b-47ca-a265-772c0e67eda5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d569495d-ca1b-47ca-a265-772c0e67eda5"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"d569495d-ca1b-47ca-a265-772c0e67eda5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":365841632,"seconds":1785547680}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60872},"address":"10.132.0.12:60872"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d569495d-ca1b-47ca-a265-772c0e67eda5"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"d569495d-ca1b-47ca-a265-772c0e67eda5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":365841632,"seconds":1785547680},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:60872","port":60872}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/auth-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d569495d-ca1b-47ca-a265-772c0e67eda5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53654","PortSpecifier":{"PortValue":53654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"080b1223-8ec8-4b1d-a42b-da33b202da11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","object":"source:{address:{socket_address:{address:\"10.132.0.12:53654\" port_value:53654}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547680 nanos:409353586} http:{id:\"080b1223-8ec8-4b1d-a42b-da33b202da11\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"080b1223-8ec8-4b1d-a42b-da33b202da11\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"080b1223-8ec8-4b1d-a42b-da33b202da11"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"080b1223-8ec8-4b1d-a42b-da33b202da11","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":409353586,"seconds":1785547680}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53654},"address":"10.132.0.12:53654"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"080b1223-8ec8-4b1d-a42b-da33b202da11"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"080b1223-8ec8-4b1d-a42b-da33b202da11","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":409353586,"seconds":1785547680},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53654","port":53654}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/auth-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"080b1223-8ec8-4b1d-a42b-da33b202da11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53668","PortSpecifier":{"PortValue":53668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","object":"source:{address:{socket_address:{address:\"10.132.0.12:53668\" port_value:53668}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547680 nanos:458225027} http:{id:\"cd40ea3c-477f-4cbb-9916-5a29fcf8a289\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cd40ea3c-477f-4cbb-9916-5a29fcf8a289\"} path:\"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":458225027,"seconds":1785547680}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53668},"address":"10.132.0.12:53668"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":458225027,"seconds":1785547680},"url_path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53668","port":53668}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/auth-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd40ea3c-477f-4cbb-9916-5a29fcf8a289","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60886","PortSpecifier":{"PortValue":60886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","object":"source:{address:{socket_address:{address:\"10.132.0.12:60886\" port_value:60886}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547680 nanos:498915897} http:{id:\"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2\"} path:\"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":498915897,"seconds":1785547680}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60886},"address":"10.132.0.12:60886"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","method":"GET","path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":498915897,"seconds":1785547680},"url_path":"/maas-api/v1/api-keys/ca1c6c08-8516-47e3-bdab-c81f28130702","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:60886","port":60886}}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/auth-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f7dac9e-9a05-4902-9b8c-c309e88cc0c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:28:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"error","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50750","PortSpecifier":{"PortValue":50750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","object":"source:{address:{socket_address:{address:\"10.132.0.12:50750\" port_value:50750}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547707 nanos:152241219} http:{id:\"8be90e7d-fc83-46e2-a1c1-90cf960f8455\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8be90e7d-fc83-46e2-a1c1-90cf960f8455\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":152241219,"seconds":1785547707}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50750},"address":"10.132.0.12:50750"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":152241219,"seconds":1785547707},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:50750","port":50750}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/auth-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8be90e7d-fc83-46e2-a1c1-90cf960f8455","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e450ae4e-c084-45ac-a75e-83136706868e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47448","PortSpecifier":{"PortValue":47448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e450ae4e-c084-45ac-a75e-83136706868e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e450ae4e-c084-45ac-a75e-83136706868e","object":"source:{address:{socket_address:{address:\"10.132.0.12:47448\" port_value:47448}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547707 nanos:195246045} http:{id:\"e450ae4e-c084-45ac-a75e-83136706868e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e450ae4e-c084-45ac-a75e-83136706868e\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e450ae4e-c084-45ac-a75e-83136706868e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e450ae4e-c084-45ac-a75e-83136706868e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e450ae4e-c084-45ac-a75e-83136706868e"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"e450ae4e-c084-45ac-a75e-83136706868e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":195246045,"seconds":1785547707}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47448},"address":"10.132.0.12:47448"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e450ae4e-c084-45ac-a75e-83136706868e"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"e450ae4e-c084-45ac-a75e-83136706868e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":195246045,"seconds":1785547707},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:47448","port":47448}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/auth-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e450ae4e-c084-45ac-a75e-83136706868e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e450ae4e-c084-45ac-a75e-83136706868e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e450ae4e-c084-45ac-a75e-83136706868e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50762","PortSpecifier":{"PortValue":50762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","object":"source:{address:{socket_address:{address:\"10.132.0.12:50762\" port_value:50762}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547707 nanos:243954987} http:{id:\"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ILdN7mhaRb13JPw4_ll1B2Yk4e2rdgMHBCc6z41duETOyQu2it2HN0ki2s8k"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da760cf9-0c7d-4ab6-a1e6-ba18dce769de","keyName":"e2e-auth-iso-a-624ac5","subscription":"e2e-auth-iso-80dd12","tenant":"e2e-shared-a-423d15","userId":"da760cf9-0c7d-4ab6-a1e6-ba18dce769de","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":243954987,"seconds":1785547707}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50762},"address":"10.132.0.12:50762"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":243954987,"seconds":1785547707},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:50762","port":50762}}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/auth-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-80dd12"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:28:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f2e36e-cafc-4d1e-9f4f-a9fa1d7994ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/772fa0fa5c333e2e132037317306a0a78fb3e81dfe08c4c136fd368fa19ea094"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3413857c0c74f433df028f243299e153fcb325808c7bf3da5659545f6b2c6f6a"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f22febaf21b583d12531555a684eb19026fb6e6911625e534d44f5e98bd640"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6cb06dfe56cb8f333f78fb0d2253b5c8e8aa91e3e36255dbe5e8bba9006eaf6"} {"level":"info","ts":"2026-08-01T01:28:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f951cea72d0ab890cc4ba719f213e9edb60f1e37d05acc3b0f3f73797aad114d"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf8e34f0d0406f01ffb49be7762c92fafc0e527867b3232e7b235dac44dfc7b"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b785c9da250a2b8302dda7a56ef956a7060f866070471e31bda7ddbc9ae30a4"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5a848d26b41b75c32e2f9aad5588863eb11e2cdcaa186f8b06d639bd11103df"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f10ceeafc7b71d4d59611aaca180a479e167c4bb8114a27b398c7698beb3108"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0fc748144587ba1822ef11362b0a48381fb991486eea6ac3459c0644469e012"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc5002347809e6a381c0b4ee2e228bf89869985e75a633fdc9af3cb7b466a655"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e068b3e2dda89ce0a4f9a5c099b03029e6688f367b18ea27259539cdfccd60"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da42841c29cd2604493a91f8df5fc080f566371a0f998d7b4e932c42ac80a3"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52ae44a9dd5126934f39531356db2d966692b59a998f76161a5e33465ab2369"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cabee0e8b03a2ba0209d25c961c52f0291ba9a7f93fdc070a3b7dae770685a5"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ac1e8561c61b9ce00010c7860202f2d069fc7ee7c1d14a47bd64cd1d5d3cb15"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"error","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96"} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"error","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"error","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"error","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"error","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:29:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"error","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:29:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82e07c6-0c85-416e-b921-b53061b07325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36124","PortSpecifier":{"PortValue":36124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c82e07c6-0c85-416e-b921-b53061b07325","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82e07c6-0c85-416e-b921-b53061b07325","object":"source:{address:{socket_address:{address:\"10.132.0.12:36124\" port_value:36124}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547800 nanos:483438855} http:{id:\"c82e07c6-0c85-416e-b921-b53061b07325\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c82e07c6-0c85-416e-b921-b53061b07325\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c82e07c6-0c85-416e-b921-b53061b07325","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c82e07c6-0c85-416e-b921-b53061b07325","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c82e07c6-0c85-416e-b921-b53061b07325"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"c82e07c6-0c85-416e-b921-b53061b07325","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":483438855,"seconds":1785547800}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36124},"address":"10.132.0.12:36124"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c82e07c6-0c85-416e-b921-b53061b07325"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"c82e07c6-0c85-416e-b921-b53061b07325","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":483438855,"seconds":1785547800},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:36124","port":36124}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/sub-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82e07c6-0c85-416e-b921-b53061b07325","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82e07c6-0c85-416e-b921-b53061b07325","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82e07c6-0c85-416e-b921-b53061b07325","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42194","PortSpecifier":{"PortValue":42194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","object":"source:{address:{socket_address:{address:\"10.132.0.12:42194\" port_value:42194}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547800 nanos:545528389} http:{id:\"6bba27ca-fcf0-486d-a91f-6f9b71631bc6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6bba27ca-fcf0-486d-a91f-6f9b71631bc6\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":545528389,"seconds":1785547800}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42194},"address":"10.132.0.12:42194"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":545528389,"seconds":1785547800},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:42194","port":42194}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/sub-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bba27ca-fcf0-486d-a91f-6f9b71631bc6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc332a21-dd8d-4106-b194-c50df40f015b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","object":"source:{address:{socket_address:{address:\"10.132.0.12:36134\" port_value:36134}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547800 nanos:591568776} http:{id:\"dc332a21-dd8d-4106-b194-c50df40f015b\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"dc332a21-dd8d-4106-b194-c50df40f015b\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aIV1qhBCKEyhrsgD_7poJUt9lVO5FoLSEOweJyPDASLZheeOscMXxGCbH1pt"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"37f04e48-1dae-4b43-812a-990f8e34023a","keyName":"e2e-sub-iso-326f8c","subscription":"e2e-a-only-1e8e8a","tenant":"e2e-shared-a-423d15","userId":"37f04e48-1dae-4b43-812a-990f8e34023a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dc332a21-dd8d-4106-b194-c50df40f015b"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"dc332a21-dd8d-4106-b194-c50df40f015b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":591568776,"seconds":1785547800}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36134},"address":"10.132.0.12:36134"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dc332a21-dd8d-4106-b194-c50df40f015b"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"dc332a21-dd8d-4106-b194-c50df40f015b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":591568776,"seconds":1785547800},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:36134","port":36134}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/sub-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-1e8e8a"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc332a21-dd8d-4106-b194-c50df40f015b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","object":"source:{address:{socket_address:{address:\"10.132.0.12:42198\" port_value:42198}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547800 nanos:642809625} http:{id:\"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OIMSJkKdKimBJo2P_7zYsrWrEwhK1ykK7batw8eA3ebv3IL0qEE3eshXAGZn"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe7ee1fd-b4c3-4344-bfc8-57267d446705","keyName":"e2e-sub-iso-62a980","subscription":"e2e-b-only-1e8e8a","tenant":"e2e-shared-b-65669d","userId":"fe7ee1fd-b4c3-4344-bfc8-57267d446705","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":642809625,"seconds":1785547800}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42198},"address":"10.132.0.12:42198"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":642809625,"seconds":1785547800},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:42198","port":42198}}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/sub-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-1e8e8a"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b88e9a2-6e5f-4a06-8aa4-1175b070a47e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:30:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:30:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:30:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47838","PortSpecifier":{"PortValue":47838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bdef6ca-5165-4c33-a034-7d2145988dab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","object":"source:{address:{socket_address:{address:\"10.132.0.12:47838\" port_value:47838}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547824 nanos:495459957} http:{id:\"6bdef6ca-5165-4c33-a034-7d2145988dab\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6bdef6ca-5165-4c33-a034-7d2145988dab\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6bdef6ca-5165-4c33-a034-7d2145988dab"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6bdef6ca-5165-4c33-a034-7d2145988dab","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":495459957,"seconds":1785547824}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47838},"address":"10.132.0.12:47838"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6bdef6ca-5165-4c33-a034-7d2145988dab"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6bdef6ca-5165-4c33-a034-7d2145988dab","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":495459957,"seconds":1785547824},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:47838","port":47838}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/sub-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bdef6ca-5165-4c33-a034-7d2145988dab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52208","PortSpecifier":{"PortValue":52208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e3686e2-cf68-482f-9e29-de365ab0206a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","object":"source:{address:{socket_address:{address:\"10.132.0.12:52208\" port_value:52208}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547824 nanos:537081845} http:{id:\"3e3686e2-cf68-482f-9e29-de365ab0206a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"3e3686e2-cf68-482f-9e29-de365ab0206a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3e3686e2-cf68-482f-9e29-de365ab0206a"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"3e3686e2-cf68-482f-9e29-de365ab0206a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":537081845,"seconds":1785547824}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52208},"address":"10.132.0.12:52208"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3e3686e2-cf68-482f-9e29-de365ab0206a"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"3e3686e2-cf68-482f-9e29-de365ab0206a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":537081845,"seconds":1785547824},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:52208","port":52208}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/sub-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e3686e2-cf68-482f-9e29-de365ab0206a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47840","PortSpecifier":{"PortValue":47840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","object":"source:{address:{socket_address:{address:\"10.132.0.12:47840\" port_value:47840}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547824 nanos:615090363} http:{id:\"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ihrKRfC1WRrXRh2w_jIjFgcn1C6d9LdV1dIcBJLeKBkRfWGToELlM1PsrNLI"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9bd9664-0e16-4068-baf2-5a19628c734f","keyName":"e2e-sub-iso-258703","subscription":"e2e-shared-sub-23f913","tenant":"e2e-shared-a-423d15","userId":"a9bd9664-0e16-4068-baf2-5a19628c734f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":615090363,"seconds":1785547824}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47840},"address":"10.132.0.12:47840"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":615090363,"seconds":1785547824},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:47840","port":47840}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/sub-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-23f913"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4ed85f-cb7c-4f80-9e3c-a0c13fdded5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52212","PortSpecifier":{"PortValue":52212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"971b457f-56a6-44c6-b123-f0494607e6b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","object":"source:{address:{socket_address:{address:\"10.132.0.12:52212\" port_value:52212}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547824 nanos:649241227} http:{id:\"971b457f-56a6-44c6-b123-f0494607e6b4\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"971b457f-56a6-44c6-b123-f0494607e6b4\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LZ51hqa9YQgnTbKw_5RZuGta6XzUQ9XHhyf0l6mjGoNEQtCPqOc9IEFdeDGM"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ba994369-94d1-45c5-b193-373b4e614b28","keyName":"e2e-sub-iso-9aa8b7","subscription":"e2e-shared-sub-23f913","tenant":"e2e-shared-b-65669d","userId":"ba994369-94d1-45c5-b193-373b4e614b28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"971b457f-56a6-44c6-b123-f0494607e6b4"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"971b457f-56a6-44c6-b123-f0494607e6b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":649241227,"seconds":1785547824}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52212},"address":"10.132.0.12:52212"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"971b457f-56a6-44c6-b123-f0494607e6b4"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"971b457f-56a6-44c6-b123-f0494607e6b4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":649241227,"seconds":1785547824},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:52212","port":52212}}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/sub-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-23f913"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:30:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971b457f-56a6-44c6-b123-f0494607e6b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd810f30d4cdda1328b0990e63a7debcb1a2598a974feb465cc785523af1fa74"} {"level":"info","ts":"2026-08-01T01:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04546a3ec9486c0f1f9dce2481ff48ed3b1d84850f553519ded46c08bcc5e720"} {"level":"info","ts":"2026-08-01T01:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09f27fdfeb9bfaacb1ebd242d4cc7e8c72db23c5629309ade9891c89d693503d"} {"level":"info","ts":"2026-08-01T01:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52656c0839d3cc8f1f7b86ded7873e8d0a1df1d34dafec27cfc1a47522dc90c6"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e3206c060f47f51f8ec003a9f5ba6b2eacadd195afdb1a056de3d0e804ab42"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c05c85a50199e241daab64858ec52a03d1c9c48e026588f26f3c24eb2e2b25e6"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b976436b1a6974d3a58147502e8d8b1546cb78b33162af470176d892e82b20c"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa6ecbaf907121625e48a220693feb9c68e2eb7c5c39aca57cd1083c87fe1022"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d213e9848777ba03142ff667ded7dd22a7fa7eed4c584ac18153250f72ad2a96"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2892f53b80f857741ec5d533e7beb6fd163eb6a9aaa3710534afcd9716b9f5af"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/329af0276326ec07b5f99286451ae3bf191af9e02e30656dce8400c77961e0c3"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69110bff057083225f29ac2018e52550ea07150bb7ddfa6ed50ff12baf9289b"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f26c409fa96d72ee292512ab03cb4ca1641abb9b10051d82dffcb3610e42b80"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff3705b418769ad51245367e5ff4cf4c47b13c18dab134e4e09f47fed5aa947"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7d90c8c155b51a3f123fb25ca185e0d8dcc3b98628cfbaac9fccc25c596fc95"} {"level":"info","ts":"2026-08-01T01:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfe68531764c24cbe12687f7b0a22ed3e751207a96d80411bdf2bf72d863f267"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5"} {"level":"error","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd"} {"level":"info","ts":"2026-08-01T01:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"error","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"debug","ts":"2026-08-01T01:32:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44440","PortSpecifier":{"PortValue":44440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","object":"source:{address:{socket_address:{address:\"10.132.0.12:44440\" port_value:44440}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547943 nanos:473149158} http:{id:\"6678c4b5-e9d5-4509-9882-ef20988cacd7\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6678c4b5-e9d5-4509-9882-ef20988cacd7\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6678c4b5-e9d5-4509-9882-ef20988cacd7"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":473149158,"seconds":1785547943}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44440},"address":"10.132.0.12:44440"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6678c4b5-e9d5-4509-9882-ef20988cacd7"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":473149158,"seconds":1785547943},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44440","port":44440}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6678c4b5-e9d5-4509-9882-ef20988cacd7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10f89a0-13e7-4150-9149-7529f4851220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34968","PortSpecifier":{"PortValue":34968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f10f89a0-13e7-4150-9149-7529f4851220","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f10f89a0-13e7-4150-9149-7529f4851220","object":"source:{address:{socket_address:{address:\"10.132.0.12:34968\" port_value:34968}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547943 nanos:536298527} http:{id:\"f10f89a0-13e7-4150-9149-7529f4851220\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f10f89a0-13e7-4150-9149-7529f4851220\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f10f89a0-13e7-4150-9149-7529f4851220","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f10f89a0-13e7-4150-9149-7529f4851220","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f10f89a0-13e7-4150-9149-7529f4851220"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f10f89a0-13e7-4150-9149-7529f4851220","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":536298527,"seconds":1785547943}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34968},"address":"10.132.0.12:34968"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f10f89a0-13e7-4150-9149-7529f4851220"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f10f89a0-13e7-4150-9149-7529f4851220","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":536298527,"seconds":1785547943},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:34968","port":34968}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f10f89a0-13e7-4150-9149-7529f4851220","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10f89a0-13e7-4150-9149-7529f4851220","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f10f89a0-13e7-4150-9149-7529f4851220","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44454","PortSpecifier":{"PortValue":44454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","object":"source:{address:{socket_address:{address:\"10.132.0.12:44454\" port_value:44454}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547943 nanos:588362746} http:{id:\"73a7a00f-4eac-4ad7-85d1-9006a66914b2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"73a7a00f-4eac-4ad7-85d1-9006a66914b2\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tqgMqTGHE25CAnZg_wijPxyvqt8cATd8nNhoVZiM1LXLHhlACXZQ5qB75GwM"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","subscription":"e2e-rate-iso-a-66e9e3","tenant":"e2e-shared-a-423d15","userId":"45760995-378f-4beb-830e-0b6fe60ebb28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":588362746,"seconds":1785547943}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44454},"address":"10.132.0.12:44454"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":588362746,"seconds":1785547943},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44454","port":44454}}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-66e9e3"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","selected_subscription":"e2e-rate-iso-a-66e9e3","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-66e9e3@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73a7a00f-4eac-4ad7-85d1-9006a66914b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"862d76b1-4601-4d37-9644-63ae18649325","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44460","PortSpecifier":{"PortValue":44460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"862d76b1-4601-4d37-9644-63ae18649325","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"862d76b1-4601-4d37-9644-63ae18649325","object":"source:{address:{socket_address:{address:\"10.132.0.12:44460\" port_value:44460}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547944 nanos:683105821} http:{id:\"862d76b1-4601-4d37-9644-63ae18649325\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"862d76b1-4601-4d37-9644-63ae18649325\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tqgMqTGHE25CAnZg_wijPxyvqt8cATd8nNhoVZiM1LXLHhlACXZQ5qB75GwM"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","subscription":"e2e-rate-iso-a-66e9e3","tenant":"e2e-shared-a-423d15","userId":"45760995-378f-4beb-830e-0b6fe60ebb28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"862d76b1-4601-4d37-9644-63ae18649325","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"862d76b1-4601-4d37-9644-63ae18649325"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"862d76b1-4601-4d37-9644-63ae18649325","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":683105821,"seconds":1785547944}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44460},"address":"10.132.0.12:44460"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"862d76b1-4601-4d37-9644-63ae18649325"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"862d76b1-4601-4d37-9644-63ae18649325","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":683105821,"seconds":1785547944},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44460","port":44460}}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-66e9e3"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"862d76b1-4601-4d37-9644-63ae18649325","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","selected_subscription":"e2e-rate-iso-a-66e9e3","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-66e9e3@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"862d76b1-4601-4d37-9644-63ae18649325","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"862d76b1-4601-4d37-9644-63ae18649325","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44466","PortSpecifier":{"PortValue":44466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","object":"source:{address:{socket_address:{address:\"10.132.0.12:44466\" port_value:44466}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547945 nanos:724915025} http:{id:\"5db740dd-ad19-491b-bd8b-722baa4bc83f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5db740dd-ad19-491b-bd8b-722baa4bc83f\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tqgMqTGHE25CAnZg_wijPxyvqt8cATd8nNhoVZiM1LXLHhlACXZQ5qB75GwM"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","subscription":"e2e-rate-iso-a-66e9e3","tenant":"e2e-shared-a-423d15","userId":"45760995-378f-4beb-830e-0b6fe60ebb28","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5db740dd-ad19-491b-bd8b-722baa4bc83f"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":724915025,"seconds":1785547945}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44466},"address":"10.132.0.12:44466"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5db740dd-ad19-491b-bd8b-722baa4bc83f"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":724915025,"seconds":1785547945},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44466","port":44466}}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-66e9e3"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45760995-378f-4beb-830e-0b6fe60ebb28","keyName":"e2e-rate-a-66e9e3","selected_subscription":"e2e-rate-iso-a-66e9e3","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-66e9e3@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-66e9e3","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5db740dd-ad19-491b-bd8b-722baa4bc83f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"error","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"debug","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a401c31c-ba95-477c-8607-4766003f05ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44392","PortSpecifier":{"PortValue":44392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a401c31c-ba95-477c-8607-4766003f05ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a401c31c-ba95-477c-8607-4766003f05ec","object":"source:{address:{socket_address:{address:\"10.132.0.12:44392\" port_value:44392}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547970 nanos:232143614} http:{id:\"a401c31c-ba95-477c-8607-4766003f05ec\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a401c31c-ba95-477c-8607-4766003f05ec\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a401c31c-ba95-477c-8607-4766003f05ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a401c31c-ba95-477c-8607-4766003f05ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a401c31c-ba95-477c-8607-4766003f05ec"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"a401c31c-ba95-477c-8607-4766003f05ec","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":232143614,"seconds":1785547970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44392},"address":"10.132.0.12:44392"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a401c31c-ba95-477c-8607-4766003f05ec"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"a401c31c-ba95-477c-8607-4766003f05ec","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":232143614,"seconds":1785547970},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44392","port":44392}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a401c31c-ba95-477c-8607-4766003f05ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a401c31c-ba95-477c-8607-4766003f05ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a401c31c-ba95-477c-8607-4766003f05ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8fef659-0635-47d7-824a-98b24339f604","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46962","PortSpecifier":{"PortValue":46962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8fef659-0635-47d7-824a-98b24339f604","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8fef659-0635-47d7-824a-98b24339f604","object":"source:{address:{socket_address:{address:\"10.132.0.12:46962\" port_value:46962}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547970 nanos:276094712} http:{id:\"f8fef659-0635-47d7-824a-98b24339f604\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f8fef659-0635-47d7-824a-98b24339f604\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8fef659-0635-47d7-824a-98b24339f604","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8fef659-0635-47d7-824a-98b24339f604","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.85:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f8fef659-0635-47d7-824a-98b24339f604"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f8fef659-0635-47d7-824a-98b24339f604","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":276094712,"seconds":1785547970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46962},"address":"10.132.0.12:46962"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02NTY2OWQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdC04ZjQ4ODQ1NDQtamN6cGYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItNjU2NjlkLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTY1NjY5ZC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f8fef659-0635-47d7-824a-98b24339f604"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f8fef659-0635-47d7-824a-98b24339f604","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":276094712,"seconds":1785547970},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:46962","port":46962}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8fef659-0635-47d7-824a-98b24339f604","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8fef659-0635-47d7-824a-98b24339f604","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8fef659-0635-47d7-824a-98b24339f604","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44402","PortSpecifier":{"PortValue":44402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","object":"source:{address:{socket_address:{address:\"10.132.0.12:44402\" port_value:44402}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547970 nanos:335706614} http:{id:\"f160e531-4d0c-447d-b83c-9f2845eea6a2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"f160e531-4d0c-447d-b83c-9f2845eea6a2\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YggwsuLJevOcPlib_vMuCUNu7bvDYoQ75fToFWqOm8SOk9KRtsURLqKLDxPi"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","subscription":"e2e-rate-iso-a-b8e531","tenant":"e2e-shared-a-423d15","userId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f160e531-4d0c-447d-b83c-9f2845eea6a2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":335706614,"seconds":1785547970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44402},"address":"10.132.0.12:44402"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f160e531-4d0c-447d-b83c-9f2845eea6a2"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":335706614,"seconds":1785547970},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44402","port":44402}}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b8e531"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","selected_subscription":"e2e-rate-iso-a-b8e531","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-b8e531@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f160e531-4d0c-447d-b83c-9f2845eea6a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44414","PortSpecifier":{"PortValue":44414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89d74cc6-df3f-4146-823d-1a5d7268c270","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","object":"source:{address:{socket_address:{address:\"10.132.0.12:44414\" port_value:44414}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547971 nanos:397058937} http:{id:\"89d74cc6-df3f-4146-823d-1a5d7268c270\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"89d74cc6-df3f-4146-823d-1a5d7268c270\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YggwsuLJevOcPlib_vMuCUNu7bvDYoQ75fToFWqOm8SOk9KRtsURLqKLDxPi"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","subscription":"e2e-rate-iso-a-b8e531","tenant":"e2e-shared-a-423d15","userId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"89d74cc6-df3f-4146-823d-1a5d7268c270"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"89d74cc6-df3f-4146-823d-1a5d7268c270","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":397058937,"seconds":1785547971}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44414},"address":"10.132.0.12:44414"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"89d74cc6-df3f-4146-823d-1a5d7268c270"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"89d74cc6-df3f-4146-823d-1a5d7268c270","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":397058937,"seconds":1785547971},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44414","port":44414}}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b8e531"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","selected_subscription":"e2e-rate-iso-a-b8e531","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-b8e531@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d74cc6-df3f-4146-823d-1a5d7268c270","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44416","PortSpecifier":{"PortValue":44416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58f38365-7f2e-4962-9227-7a612febd1f8","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","object":"source:{address:{socket_address:{address:\"10.132.0.12:44416\" port_value:44416}}} destination:{address:{socket_address:{address:\"10.133.0.82:443\" port_value:443}}} request:{time:{seconds:1785547972 nanos:438878947} http:{id:\"58f38365-7f2e-4962-9227-7a612febd1f8\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"58f38365-7f2e-4962-9227-7a612febd1f8\"} path:\"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions\" host:\"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YggwsuLJevOcPlib_vMuCUNu7bvDYoQ75fToFWqOm8SOk9KRtsURLqKLDxPi"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","subscription":"e2e-rate-iso-a-b8e531","tenant":"e2e-shared-a-423d15","userId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-423d15.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdC01N2Y3ZmQ4YjQ4LWtsNzZrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLTQyM2QxNS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS00MjNkMTUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"58f38365-7f2e-4962-9227-7a612febd1f8"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"58f38365-7f2e-4962-9227-7a612febd1f8","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":438878947,"seconds":1785547972}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44416},"address":"10.132.0.12:44416"}}}}},"destination":{"address":"10.133.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"},"headers":{":authority":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-423d15-kserve-workload-svc.ai-tenant-e2e-shared-a-423d15.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.82~e2e-shared-a-423d15-openshift-default-57f7fd8b48-kl76k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"58f38365-7f2e-4962-9227-7a612febd1f8"},"host":"e2e-shared-a-423d15.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"58f38365-7f2e-4962-9227-7a612febd1f8","method":"POST","path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":438878947,"seconds":1785547972},"url_path":"/ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:44416","port":44416}}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b8e531"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"126c5a92-a9c4-4c60-ad2e-d73c40527a6d","keyName":"e2e-rate-a-b8e531","selected_subscription":"e2e-rate-iso-a-b8e531","selected_subscription_key":"ai-tenant-e2e-shared-a-423d15/e2e-rate-iso-a-b8e531@ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-423d15/models/facebook/opt-125m","name":"rate-test-model-423d15","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b8e531","namespace":"ai-tenant-e2e-shared-a-423d15","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-423d15/rate-test-model-423d15"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58f38365-7f2e-4962-9227-7a612febd1f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46970","PortSpecifier":{"PortValue":46970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.85:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","method":"POST","path":"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions","host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","object":"source:{address:{socket_address:{address:\"10.132.0.12:46970\" port_value:46970}}} destination:{address:{socket_address:{address:\"10.133.0.85:443\" port_value:443}}} request:{time:{seconds:1785547972 nanos:501204816} http:{id:\"596d98ce-c18b-4eb9-bb07-da8dd86e1de8\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-65669d-kserve-workload-svc.ai-tenant-e2e-shared-b-65669d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"596d98ce-c18b-4eb9-bb07-da8dd86e1de8\"} path:\"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions\" host:\"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Bb8btpYuCZ56nsDZ_dFLFOVLLaQmsXCcqPMUgvYHLsvOOFPJea8GTAWgnrul"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e3ce5bc-db5b-4879-b9f0-2c90c3b8f41e","keyName":"e2e-rate-b-b8e531","subscription":"e2e-rate-iso-b-b8e531","tenant":"e2e-shared-b-65669d","userId":"3e3ce5bc-db5b-4879-b9f0-2c90c3b8f41e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-65669d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m","name":"rate-test-model-65669d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b8e531","namespace":"ai-tenant-e2e-shared-b-65669d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d"}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-65669d-kserve-workload-svc.ai-tenant-e2e-shared-b-65669d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","method":"POST","path":"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":501204816,"seconds":1785547972}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46970},"address":"10.132.0.12:46970"}}}}},"destination":{"address":"10.133.0.85:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"},"headers":{":authority":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-65669d-kserve-workload-svc.ai-tenant-e2e-shared-b-65669d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.85~e2e-shared-b-65669d-openshift-default-8f4884544-jczpf.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8"},"host":"e2e-shared-b-65669d.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","method":"POST","path":"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":501204816,"seconds":1785547972},"url_path":"/ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:46970","port":46970}}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b8e531"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e3ce5bc-db5b-4879-b9f0-2c90c3b8f41e","keyName":"e2e-rate-b-b8e531","selected_subscription":"e2e-rate-iso-b-b8e531","selected_subscription_key":"ai-tenant-e2e-shared-b-65669d/e2e-rate-iso-b-b8e531@ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-65669d/models/facebook/opt-125m","name":"rate-test-model-65669d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b8e531","namespace":"ai-tenant-e2e-shared-b-65669d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-65669d/rate-test-model-65669d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:32:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"596d98ce-c18b-4eb9-bb07-da8dd86e1de8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350ba8da4a416a39a803f22b023c21bb2551fea627bfa851db93e169ca8d8f55"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ddeb039acf73d3777e18627c658b94001f8dc5b83176abba92d7674400340b7"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74c94f46d72502dd5ae875f1fed6a35eed063ee5bb3cdd52d9dc34cb5ff64ed"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b24bcd6a414f271c459c207878a7b1b882e8e572ac6dce123620e37369faa0"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cf90f61191985b82b83d0afd6963457980e84c6fb53f44a829ee4ef749f4249"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/543025f00c876717cf505138c26659c49b0aa3631e6e1b593f494209655e4f35"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7cc7dea050966b9e18913a0d423d6f02018909124c5691e4d6d62bc2d9c4d9"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac8975fcadf56c0e68eac25e3b6946976cb0864a49dc49f80b1743b15dc35de5"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5fb6d94a54faf796229e7a09c9cd05800acb635d57ab9a50d3357d36dda0b9"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be393cbedb6b6d0f5f0e800f025b5330962bb9094b00a21c3792c1c163a9e5f"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5b57bf9d6f696c9b88eb5ff638ae9f444125a7e98442bb297787a38550cf33"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46d1b598b5fe5c602615919c48ca2c60cb27141acf31808234bd678956d75e82"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66cc9c99a5856a9cc48dbbd4be052837e6fc2bfcdd2d735ecad9f1bda839f7cd"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d37c92aa78580e801672d32b60f7d87aaa1446681d1340ef23bf8e814c2a7e2c"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8688ec4e0ea9e39d46a64ae0c9ca0468adbfff0e481a9b6efd2a580dcae68400"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f96fcb1a376339005deeb5e9deef7a3f354222ec8a2c1cb40fec8d8f709c2396"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4c81a9f80549623133ad40624f4029c998b01d9d6a2b7d0aaef6dd56c2edae4"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d71a6b8c16b43131c153e24df475dc70a665971c09573c5463c5718e60dc1d65"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5733a12ae605e4b909670d9d39f731496846dd38d4cba26da216837c8c91233f"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1c40274fa38aae99d759dcf119477d6cdd9e856fd61ff9c6dfbdc0c8f9843bd"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec976a043419e9448c2fc140a8804cb442084b698af61ecb8a4c33e43a72277a"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5cb40dfefae7cd5f122a8b14c7f8a7f62a03409b207edc51cf4c7f324ddb92e"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ecf024ba7fc4ed4e5a62496da186cec6d86d379f0bff791df9845037871f44"} {"level":"info","ts":"2026-08-01T01:32:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b704946caa687c3bec6b532989903fcc7ec675efb05e4d03e1798d5d256069d3"} {"level":"info","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53472","PortSpecifier":{"PortValue":53472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","object":"source:{address:{socket_address:{address:\"10.132.0.12:53472\" port_value:53472}}} destination:{address:{socket_address:{address:\"10.132.0.50:443\" port_value:443}}} request:{time:{seconds:1785548056 nanos:762466568} http:{id:\"8afe0c5f-07a1-43b9-9634-9b83d32f397f\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8afe0c5f-07a1-43b9-9634-9b83d32f397f\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f"},"host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":762466568,"seconds":1785548056}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53472},"address":"10.132.0.12:53472"}}}}},"destination":{"address":"10.132.0.50:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f"},"host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":762466568,"seconds":1785548056},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53472","port":53472}}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8afe0c5f-07a1-43b9-9634-9b83d32f397f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a112bf-1504-4307-ada8-02509457ed2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53480","PortSpecifier":{"PortValue":53480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39a112bf-1504-4307-ada8-02509457ed2e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a112bf-1504-4307-ada8-02509457ed2e","object":"source:{address:{socket_address:{address:\"10.132.0.12:53480\" port_value:53480}}} destination:{address:{socket_address:{address:\"10.132.0.50:443\" port_value:443}}} request:{time:{seconds:1785548056 nanos:812539766} http:{id:\"39a112bf-1504-4307-ada8-02509457ed2e\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXo5OWRuCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"39a112bf-1504-4307-ada8-02509457ed2e\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ifD4KmPxgZcVaWwo_WDDzG2M2e2L43PaL0FDAm5zxQSDz0kJ3HaBPN2gz6iQ"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d12a0a3d-e92f-489a-9edc-f3045692d064","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"d12a0a3d-e92f-489a-9edc-f3045692d064","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39a112bf-1504-4307-ada8-02509457ed2e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"39a112bf-1504-4307-ada8-02509457ed2e"},"host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"39a112bf-1504-4307-ada8-02509457ed2e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":812539766,"seconds":1785548056}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53480},"address":"10.132.0.12:53480"}}}}},"destination":{"address":"10.132.0.50:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXo5OWRuCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.50~maas-default-gateway-openshift-default-78bb78ff78-z99dn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"39a112bf-1504-4307-ada8-02509457ed2e"},"host":"maas.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"39a112bf-1504-4307-ada8-02509457ed2e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":812539766,"seconds":1785548056},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:53480","port":53480}}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a112bf-1504-4307-ada8-02509457ed2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d12a0a3d-e92f-489a-9edc-f3045692d064","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a112bf-1504-4307-ada8-02509457ed2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a112bf-1504-4307-ada8-02509457ed2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-01T01:34:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"} {"level":"info","ts":"2026-08-01T01:34:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951"} {"level":"info","ts":"2026-08-01T01:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"} {"level":"info","ts":"2026-08-01T01:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a"} {"level":"info","ts":"2026-08-01T01:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57"} {"level":"info","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52062","PortSpecifier":{"PortValue":52062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.87:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","object":"source:{address:{socket_address:{address:\"10.132.0.12:52062\" port_value:52062}}} destination:{address:{socket_address:{address:\"10.132.0.87:443\" port_value:443}}} request:{time:{seconds:1785548094 nanos:641305748} http:{id:\"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c6258163896b"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f093f494-e83a-4e67-9090-e38a643609fe"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5567a89d-3dd9-4070-a7d2-371a26627113","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.87:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb"},"host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":641305748,"seconds":1785548094}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52062},"address":"10.132.0.12:52062"}}}}},"destination":{"address":"10.132.0.87:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"},"headers":{":authority":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb"},"host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":641305748,"seconds":1785548094},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:52062","port":52062}}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-de9aaa/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f21d2520-e1ef-41a2-9a4b-9b83a961f3eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"453e206b-338e-49c5-87f4-313630055dd2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52076","PortSpecifier":{"PortValue":52076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.87:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"453e206b-338e-49c5-87f4-313630055dd2","method":"POST","path":"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions","host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"453e206b-338e-49c5-87f4-313630055dd2","object":"source:{address:{socket_address:{address:\"10.132.0.12:52076\" port_value:52076}}} destination:{address:{socket_address:{address:\"10.132.0.87:443\" port_value:443}}} request:{time:{seconds:1785548096 nanos:707744796} http:{id:\"453e206b-338e-49c5-87f4-313630055dd2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-de9aaa-kserve-workload-svc.ai-tenant-e2e-ipp-a-de9aaa.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.12\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.12\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"453e206b-338e-49c5-87f4-313630055dd2\"} path:\"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions\" host:\"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NPVPANAXzh4rUYKr_KTNrgcs4MbNj2ZgEjK2UoOVESzWM2CqAsedJngBSuQ8"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a465aa7e-1998-45af-8458-472b5e8a2f27","keyName":"e2e-ipp-de9aaa","subscription":"ipp-route-de9aaa-sub","tenant":"e2e-ipp-a-de9aaa","userId":"a465aa7e-1998-45af-8458-472b5e8a2f27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-de9aaa.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-de9aaa/models/facebook/opt-125m","name":"ipp-route-de9aaa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-de9aaa-sub","namespace":"ai-tenant-e2e-ipp-a-de9aaa","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa"}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"453e206b-338e-49c5-87f4-313630055dd2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-de9aaa-kserve-workload-svc.ai-tenant-e2e-ipp-a-de9aaa.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"453e206b-338e-49c5-87f4-313630055dd2"},"host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"453e206b-338e-49c5-87f4-313630055dd2","method":"POST","path":"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":707744796,"seconds":1785548096}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52076},"address":"10.132.0.12:52076"}}}}},"destination":{"address":"10.132.0.87:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951"},"headers":{":authority":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-de9aaa-kserve-workload-svc.ai-tenant-e2e-ipp-a-de9aaa.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.12","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.87~e2e-ipp-a-de9aaa-openshift-default-5bc9c4d744-8flhd.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.12","x-forwarded-host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"453e206b-338e-49c5-87f4-313630055dd2"},"host":"e2e-ipp-a-de9aaa.apps.45123693-2adf-4201-b372-c6258163896b.prod.konfluxeaas.com","id":"453e206b-338e-49c5-87f4-313630055dd2","method":"POST","path":"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":707744796,"seconds":1785548096},"url_path":"/ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.12:52076","port":52076}}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-de9aaa/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-de9aaa-sub"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453e206b-338e-49c5-87f4-313630055dd2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a465aa7e-1998-45af-8458-472b5e8a2f27","keyName":"e2e-ipp-de9aaa","selected_subscription":"ipp-route-de9aaa-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa-sub@ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-de9aaa/models/facebook/opt-125m","name":"ipp-route-de9aaa","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-de9aaa-sub","namespace":"ai-tenant-e2e-ipp-a-de9aaa","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-de9aaa/ipp-route-de9aaa"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"453e206b-338e-49c5-87f4-313630055dd2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-01T01:34:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"453e206b-338e-49c5-87f4-313630055dd2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b352199e31f736231446ca28d69014b6db3df0733ce2a698cfd4552982ea3308"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c2c64d17cfb6366c94a4b191bbe4cd8bbda32858a2ebc70ddfcdb1450a9e3f1"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/517d2fb1c1b82262979fc7254e255b6900edc3a9e7d74ec24958366611fda890"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c60cfba7bc5d7b6a749879601279d7e316bfb9f1f2d12a615c7ec5d8d8ae8ab"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/275ed1e6cc3940e9583768776a3d077526e2892406e732995d1e0fed9d99506d"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59f2c29828066893dbb39edf1830a5957b78cc34362f71aa4db16f1e1799594c"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5efa9b385fe70ce1201493f432cf9152328bae814a40ef7bb679370e5a818dfa"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce0b56c677b15612209f51636c23f3af95763e7425cb1a094ce105f44d4b9b52"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde058c8fd076b690a15ea6f36c93aa39edff08fc7d0e31d450a855b48aee65a"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5f6d2d26216b0079971e0236ab0a2bb39b7b89363b827c6c0291b5ebbce951"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e00bb083aea1c1e77ce281aac43141309bb1d8168898d5d28d7f0653174302b"} {"level":"info","ts":"2026-08-01T01:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ea903b66999349993ff95143d601b6d79968e29103f87aa4e231f38222ded57"}