--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"error","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:34:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"info","ts":"2026-07-14T10:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c0e3d4dddce6415bfa4ee6cf2b6277df2c2129434e461cdb31db27981fdbb7f"} {"level":"info","ts":"2026-07-14T10:34:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f360720a16d4f89240d50ba91d495a4c2582bbc0ba278ead1585585212a574f8"} {"level":"info","ts":"2026-07-14T10:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc0a3920a0b303c9322e107c816a5bf7e90c979e417c9a57a01d63fab94f40a3"} {"level":"info","ts":"2026-07-14T10:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c889ac22a346c4bdbff089e757ec70be54716c68ba023f4ce47d9efff3a4813"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c"} {"level":"error","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"error","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"info","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"error","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"error","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3"} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3"} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f"} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f"} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19"} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f"} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19"} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff"} {"level":"debug","ts":"2026-07-14T10:35:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:35:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449"} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:35:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:35:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"} {"level":"info","ts":"2026-07-14T10:35:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53942","PortSpecifier":{"PortValue":53942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69392058-12d2-400d-9a82-1ae832abfaf6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53942","PortSpecifier":{"PortValue":53942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025359,"nanos":76005068},"http":{"id":"69392058-12d2-400d-9a82-1ae832abfaf6","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69392058-12d2-400d-9a82-1ae832abfaf6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60488","PortSpecifier":{"PortValue":60488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60488","PortSpecifier":{"PortValue":60488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025359,"nanos":154129454},"http":{"id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c555e91-e0a5-4b1e-8fc7-0a3b3c04cafb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53950","PortSpecifier":{"PortValue":53950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd621152-4750-484c-aa5e-8a8009bf7da6","method":"GET","path":"/maas-api/v1/api-keys/9824b479-6540-4772-9706-a8228dd85e5b","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:53950","PortSpecifier":{"PortValue":53950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025359,"nanos":253890645},"http":{"id":"bd621152-4750-484c-aa5e-8a8009bf7da6","method":"GET","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9824b479-6540-4772-9706-a8228dd85e5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9824b479-6540-4772-9706-a8228dd85e5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd621152-4750-484c-aa5e-8a8009bf7da6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","method":"GET","path":"/maas-api/v1/api-keys/cea78c2a-3186-4749-856c-a492a9a3518a","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:60504","PortSpecifier":{"PortValue":60504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025359,"nanos":293802525},"http":{"id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","method":"GET","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea78c2a-3186-4749-856c-a492a9a3518a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cea78c2a-3186-4749-856c-a492a9a3518a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:35:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b020a405-19a8-4516-9cc4-cc9da8e220c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025383,"nanos":573371914},"http":{"id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf9d5dd-aa4a-4c85-84a3-b0057070fb77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54978","PortSpecifier":{"PortValue":54978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54978","PortSpecifier":{"PortValue":54978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025383,"nanos":609595957},"http":{"id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3870cdad-a8b5-4e21-b956-f2e183f5fcde","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025383,"nanos":650311128},"http":{"id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","method":"GET","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iBmsLZNRzhBl3V6L_ZEYG9k4st1kgCzGJcRhESZb0Jc9l5mEdSd66WUKhu82"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iBmsLZNRzhBl3V6L_ZEYG9k4st1kgCzGJcRhESZb0Jc9l5mEdSd66WUKhu82\"}"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2e1f470-e83f-403c-ae52-3238d5e7b1f0","keyName":"e2e-auth-iso-a-bf4de5","subscription":"e2e-auth-iso-a572e4","tenant":"e2e-shared-a-817aae","userId":"b2e1f470-e83f-403c-ae52-3238d5e7b1f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a572e4"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cba0ee49-0729-408f-840c-d9ffe6f1fd3d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46538","PortSpecifier":{"PortValue":46538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:46538","PortSpecifier":{"PortValue":46538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025400,"nanos":718568975},"http":{"id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f580cd4-29c0-43dc-ab3f-6677c91c7449","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88f93040-f6d1-4326-9074-9b613bb008c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025400,"nanos":753402597},"http":{"id":"88f93040-f6d1-4326-9074-9b613bb008c1","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f93040-f6d1-4326-9074-9b613bb008c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e36296e4-7acd-4a64-8125-344eb1836c64","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54580","PortSpecifier":{"PortValue":54580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025400,"nanos":791182248},"http":{"id":"e36296e4-7acd-4a64-8125-344eb1836c64","method":"GET","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cmtc9s6K7A9mRjV3_RwiF7LgCp2dRoUW5XkuT4GcBVjIz8jFNVW7326u99kA"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cmtc9s6K7A9mRjV3_RwiF7LgCp2dRoUW5XkuT4GcBVjIz8jFNVW7326u99kA\"}"} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T10:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e36296e4-7acd-4a64-8125-344eb1836c64","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025417,"nanos":735912593},"http":{"id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04b1b3d-84ca-4f82-a176-7c89be2c1615","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56846","PortSpecifier":{"PortValue":56846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56846","PortSpecifier":{"PortValue":56846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025417,"nanos":769414933},"http":{"id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02a87912-de00-46dd-9cf1-4d7c093c7f3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34426","PortSpecifier":{"PortValue":34426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025417,"nanos":808602570},"http":{"id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50ce055a-813e-4801-b1fa-b3af18fe7a9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56862","PortSpecifier":{"PortValue":56862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:56862","PortSpecifier":{"PortValue":56862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025417,"nanos":843356280},"http":{"id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adee7eb1-b4ff-4787-bbda-0d3c411b2902","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39732","PortSpecifier":{"PortValue":39732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39732","PortSpecifier":{"PortValue":39732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025434,"nanos":868362348},"http":{"id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e5a58c-97cb-4289-a6ce-7c63fc9bd9cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42224","PortSpecifier":{"PortValue":42224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42224","PortSpecifier":{"PortValue":42224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025434,"nanos":930375500},"http":{"id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c9a163-893b-40e9-acac-09c7e9c15c96","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42240","PortSpecifier":{"PortValue":42240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34a2a771-538a-4089-ba78-ae5007c4f16f","method":"GET","path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42240","PortSpecifier":{"PortValue":42240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025434,"nanos":966972279},"http":{"id":"34a2a771-538a-4089-ba78-ae5007c4f16f","method":"GET","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a2a771-538a-4089-ba78-ae5007c4f16f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39748","PortSpecifier":{"PortValue":39748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","method":"GET","path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39748","PortSpecifier":{"PortValue":39748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025434,"nanos":997848374},"http":{"id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","method":"GET","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/de379f00-4eab-4b4a-9e36-cda58d31cf29",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd20a88e-803f-4ee6-92b6-5cf71eff29d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38954","PortSpecifier":{"PortValue":38954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38954","PortSpecifier":{"PortValue":38954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025452,"nanos":21607843},"http":{"id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"706c8c4a-61df-4f62-a600-fd68bc16c55e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bfbad0b-0f69-4816-936e-d1b432d03538","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:40684","PortSpecifier":{"PortValue":40684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025452,"nanos":55381757},"http":{"id":"4bfbad0b-0f69-4816-936e-d1b432d03538","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/auth-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bfbad0b-0f69-4816-936e-d1b432d03538","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:38966","PortSpecifier":{"PortValue":38966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025452,"nanos":92357665},"http":{"id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kMzFz5QcXNsYx3hS_Z9gq5IoF1e91sDlEBVFB7QXDtjiKd2RyKqXm9Fqg4CS"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kMzFz5QcXNsYx3hS_Z9gq5IoF1e91sDlEBVFB7QXDtjiKd2RyKqXm9Fqg4CS\"}"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88620c7d-9141-4efe-a4c8-15f15013ae35","keyName":"e2e-auth-iso-a-ef0b67","subscription":"e2e-auth-iso-a0d00e","tenant":"e2e-shared-a-817aae","userId":"88620c7d-9141-4efe-a4c8-15f15013ae35","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/auth-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a0d00e"} {"level":"info","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:37:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea204df1-fb9f-45de-a713-3475e3db6c1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e569717282ee6578952807aba549fbd8153347fdd6e9aed4e560a74f955ace56"} {"level":"info","ts":"2026-07-14T10:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e9fe806e98780beb19648182c06d3efcd303a67294186b9381ef3bb8bb59b19"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca0af25bd3cc8785d20bf8f07d2d9ddb386efe4c4a5fd5ef4ab8ed1044502aa8"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc88ad9ab83419ced26c02fef33f85b56ab01a9129482339d01070c020b2b83"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b4a0e66eb64f712ec29f6d9ff92eedde30493ce849b9d9a3f5c1fc9eaef82c5"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbb32265f82506ceb5b24f46cb45cbd08b85aaa6fd1ba87f0cf59853d7eeea60"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73fba4135399bc22b4c3d6ab199e6962886a45b3e6cef39e6ffe2f74736b8cff"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37394b15e9587c2a860ba28a9690ec309f3cdbda543c613213dfa8308bc75ccd"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e2603db15a4b9dec36184a336572dcc7b2730dde3a75932f746adb5988d3e8c"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07ee2ec168d90eb91e93da9a542f7ebbfb2a57bf2a22955a62aaffefec65891b"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f6d240e2a3bc2d7f96e44d97d828e02e296abd5472a027abbac6d3de1f84af9"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a6eaca2ade53fcd150eb80f3995bae5b65e5009f0157588847011c30862ea3"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8e4fbf3cef2eab0c4fd9a3be71b768b7db7e107db7d71fb9d7548d276577058"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63234a94662f34409b99308050318f79e797cfb98f42cba16c68bf22e4d80449"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/605d14c96cb8bc173f1d59ed556eadb32111b3f8fe196f6f7928c1eb0ce3f6b8"} {"level":"info","ts":"2026-07-14T10:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da14fc88bae340a51d3dff4bcae2677798bc85d5fa1a960a20e10e1c39dfca9f"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"} {"level":"info","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"error","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"error","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"error","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:37:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:37:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"error","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7"} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"error","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:38:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"error","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"debug","ts":"2026-07-14T10:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:38:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:38:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:38:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025531,"nanos":243773975},"http":{"id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/sub-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fba8fa49-8cf7-4b08-b6ff-b5efccd47d81","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57030","PortSpecifier":{"PortValue":57030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57030","PortSpecifier":{"PortValue":57030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025531,"nanos":284506321},"http":{"id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/sub-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"428671f4-5674-4b7b-9ecc-b57c2d8ea38e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54704","PortSpecifier":{"PortValue":54704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54704","PortSpecifier":{"PortValue":54704}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025531,"nanos":326370341},"http":{"id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","method":"GET","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3YgXfin43ZqlmT9t_4k2uZuOt9cU2KdRCiLBsgBquPgGytuld0g5Cwp05ExQ"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3YgXfin43ZqlmT9t_4k2uZuOt9cU2KdRCiLBsgBquPgGytuld0g5Cwp05ExQ\"}"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"29409d38-2f24-4617-bbb7-f11037671e2f","keyName":"e2e-sub-iso-8e6b39","subscription":"e2e-a-only-a4e7df","tenant":"e2e-shared-a-817aae","userId":"29409d38-2f24-4617-bbb7-f11037671e2f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/sub-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a4e7df"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74f7f6e5-eaba-4dee-bc4e-5d22a8089a88","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57032","PortSpecifier":{"PortValue":57032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025531,"nanos":367677667},"http":{"id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","method":"GET","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uAtbzqGLPlpTJ0BB_oi14VRfF1qf4zUZlDjJAg3TopoOiiUFFbpIKn2uCW9x"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uAtbzqGLPlpTJ0BB_oi14VRfF1qf4zUZlDjJAg3TopoOiiUFFbpIKn2uCW9x\"}"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e52bf68-8795-4349-a7d4-a501d138c204","keyName":"e2e-sub-iso-bf61fd","subscription":"e2e-b-only-a4e7df","tenant":"e2e-shared-b-684339","userId":"0e52bf68-8795-4349-a7d4-a501d138c204","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/sub-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a4e7df"} {"level":"info","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fd6b3ac-4b83-4ba6-9c98-2bf9a4939644","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb53b114-8b30-416d-9a02-b1e6918e920e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025544,"nanos":67324546},"http":{"id":"cb53b114-8b30-416d-9a02-b1e6918e920e","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/sub-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb53b114-8b30-416d-9a02-b1e6918e920e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58956","PortSpecifier":{"PortValue":58956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58956","PortSpecifier":{"PortValue":58956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025544,"nanos":104900881},"http":{"id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/sub-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05a73ba5-55df-4b6f-aa59-516b40c3b99f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73672722-6513-98bd-8973-8bb05c0bc667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52238","PortSpecifier":{"PortValue":52238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73672722-6513-98bd-8973-8bb05c0bc667","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73672722-6513-98bd-8973-8bb05c0bc667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52238","PortSpecifier":{"PortValue":52238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025544,"nanos":144648303},"http":{"id":"73672722-6513-98bd-8973-8bb05c0bc667","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lh2hk5QvEqw6d40f_vdG6CU19xhy556f9Pxa81FI7lTl7bd9i6gimoruaA2H"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lh2hk5QvEqw6d40f_vdG6CU19xhy556f9Pxa81FI7lTl7bd9i6gimoruaA2H\"}"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f5a1a95-1497-4706-a197-2506c295a89d","keyName":"e2e-sub-iso-a22f33","subscription":"e2e-shared-sub-dd65e3","tenant":"e2e-shared-a-817aae","userId":"2f5a1a95-1497-4706-a197-2506c295a89d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73672722-6513-98bd-8973-8bb05c0bc667","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/sub-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dd65e3"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73672722-6513-98bd-8973-8bb05c0bc667","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73672722-6513-98bd-8973-8bb05c0bc667","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73672722-6513-98bd-8973-8bb05c0bc667","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69d199fe-f39b-484c-b924-33ca6329276c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58962","PortSpecifier":{"PortValue":58962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69d199fe-f39b-484c-b924-33ca6329276c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69d199fe-f39b-484c-b924-33ca6329276c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:58962","PortSpecifier":{"PortValue":58962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025544,"nanos":174280018},"http":{"id":"69d199fe-f39b-484c-b924-33ca6329276c","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12WRLh861pvHJF7cY_vDQTsSGK1QHhVkCLLKlVSEQPkksFAQUe0iXlrq6Ejok"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12WRLh861pvHJF7cY_vDQTsSGK1QHhVkCLLKlVSEQPkksFAQUe0iXlrq6Ejok\"}"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8cd4f4b3-d471-4d44-9465-f7e4ab0a3a7e","keyName":"e2e-sub-iso-e63801","subscription":"e2e-shared-sub-dd65e3","tenant":"e2e-shared-b-684339","userId":"8cd4f4b3-d471-4d44-9465-f7e4ab0a3a7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69d199fe-f39b-484c-b924-33ca6329276c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/sub-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69d199fe-f39b-484c-b924-33ca6329276c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-dd65e3"} {"level":"info","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69d199fe-f39b-484c-b924-33ca6329276c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69d199fe-f39b-484c-b924-33ca6329276c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cbbaf60fb0aa56298bb7a5a484e733a93ba6e10497fc1b6c06467c679350995"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0182a6c6a7fd520ac340850c2831bcf7456570fda13db0cb307d0899fa362cd8"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6019c82226dffdaf6057bb20847f0abde73b19314b74d50672c8ac2134040012"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eef1b1b26fbfe3bf4c397fb09914838f4f342917310ec82ebc6809470c29db1c"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b29b565a8f4a88b40891a6619459b7a0da56feeb82c1de1aba41277aeecd4b2b"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7e2f03732fdeaee3149bc8fde82522295bca5d6fac490e34995410f9fcf7923"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1b67ec331366a10dbbd0dc3dc34c8a312bf5ab014ce6b3006a0e09065147be"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb024bfa718f70b53aa312e954cd48f874d1a8d5469dde0852e4cf91bafecd2"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f23377783ecf91d1fb48f3defc0e8b410b17c3fef3d08a9f59b13a051288c72b"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ee9a035d2c63cd0db5395c1adc63b2a483e58af460c274bddf0e0b8bb58ff3d"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b15cf5861de25ada7163c51fd7a2429fe7acf3640deafd10c202f2a750d2cc7"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4caafb49103011ff3a4d5e4dbcf5baa9675d697c5811c8375f0b4fa973be4f"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80c76e3ca95045f28552c4e43e43f4fa344cdf4d6a3ed24e9f9f5638ce1e1c44"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb974ce4ee9f981ca42facb4bfe28a4b2d6e0d664649491395ccb4f39307701"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62b259791843a772be5d5ba6c5517ecf139c7b8d42e73fe2c79520f53ef1fbcb"} {"level":"info","ts":"2026-07-14T10:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f8fd805ba921e31c8ec0c0c8442f957c87dc832a6737f03f34d005fcd9b3fdf"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"info","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T10:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"info","ts":"2026-07-14T10:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57534","PortSpecifier":{"PortValue":57534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37b287df-fee7-4a8b-a39d-cf80a8770607","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57534","PortSpecifier":{"PortValue":57534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":887083371},"http":{"id":"37b287df-fee7-4a8b-a39d-cf80a8770607","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37b287df-fee7-4a8b-a39d-cf80a8770607","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89564a18-7c11-4901-9081-7f229419652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89564a18-7c11-4901-9081-7f229419652c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89564a18-7c11-4901-9081-7f229419652c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:50358","PortSpecifier":{"PortValue":50358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":929598530},"http":{"id":"89564a18-7c11-4901-9081-7f229419652c","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89564a18-7c11-4901-9081-7f229419652c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89564a18-7c11-4901-9081-7f229419652c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89564a18-7c11-4901-9081-7f229419652c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89564a18-7c11-4901-9081-7f229419652c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89564a18-7c11-4901-9081-7f229419652c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57550","PortSpecifier":{"PortValue":57550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57550","PortSpecifier":{"PortValue":57550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025617,"nanos":977724103},"http":{"id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada6a0b3-c2d0-4c42-86ee-b19af80836eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48508","PortSpecifier":{"PortValue":48508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bddd351-14ff-48e2-ab48-259030fa20af","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48508","PortSpecifier":{"PortValue":48508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025619,"nanos":44858499},"http":{"id":"1bddd351-14ff-48e2-ab48-259030fa20af","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bddd351-14ff-48e2-ab48-259030fa20af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48524","PortSpecifier":{"PortValue":48524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48524","PortSpecifier":{"PortValue":48524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025620,"nanos":83457748},"http":{"id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y3duaphy5GErDDpg_OOZc59xXwHxqNiOdNjITFdNGR2zgCvz6VPyHKYxwKp2\"}"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","subscription":"e2e-rate-iso-a-e39ec0","tenant":"e2e-shared-a-817aae","userId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-e39ec0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e39ec0"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93cafc16-51ad-4895-a5db-bfbbd91a9074","keyName":"e2e-rate-a-e39ec0","selected_subscription":"e2e-rate-iso-a-e39ec0","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-e39ec0@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e39ec0","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a9f5d6a-dcbe-4c4f-b622-b16e28b54765","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47096","PortSpecifier":{"PortValue":47096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025632,"nanos":954549793},"http":{"id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644fa8c-d6fe-41cc-a5ba-d680e3d5d177","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35594","PortSpecifier":{"PortValue":35594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35594","PortSpecifier":{"PortValue":35594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025633,"nanos":2312167},"http":{"id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b694ec30-05ff-40c7-8030-131730dc7de8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"]}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/85d221d08c98"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d03a9ac4-c394-4a5c-8dc2-064af49a99ed"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b694ec30-05ff-40c7-8030-131730dc7de8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9c5d46f-e4c8-488a-a589-e6b4f2aa878c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47110","PortSpecifier":{"PortValue":47110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87439731-03f7-4da3-a1a3-a89393f3c89a","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47110","PortSpecifier":{"PortValue":47110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025633,"nanos":41906253},"http":{"id":"87439731-03f7-4da3-a1a3-a89393f3c89a","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87439731-03f7-4da3-a1a3-a89393f3c89a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47126","PortSpecifier":{"PortValue":47126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8aee616-8323-40d4-b32f-1a8825454493","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47126","PortSpecifier":{"PortValue":47126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025634,"nanos":80743943},"http":{"id":"a8aee616-8323-40d4-b32f-1a8825454493","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8aee616-8323-40d4-b32f-1a8825454493","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8aee616-8323-40d4-b32f-1a8825454493","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8aee616-8323-40d4-b32f-1a8825454493","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8aee616-8323-40d4-b32f-1a8825454493","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","method":"POST","path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions","host":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:47130","PortSpecifier":{"PortValue":47130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025635,"nanos":118494162},"http":{"id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","method":"POST","headers":{":authority":"e2e-shared-a-817aae.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaxZZNM6VPuLQVg1_VBRmenY7tZJbT8LvTb4KT8F5AGGfUE5QpjrhtCvoyLz\"}"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","subscription":"e2e-rate-iso-a-ca2b6c","tenant":"e2e-shared-a-817aae","userId":"a79705c5-e424-405d-8996-88091e18749f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\",\"requestedSubscription\":\"e2e-rate-iso-a-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-817aae.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca2b6c"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a79705c5-e424-405d-8996-88091e18749f","keyName":"e2e-rate-a-ca2b6c","selected_subscription":"e2e-rate-iso-a-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-a-817aae/e2e-rate-iso-a-ca2b6c@ai-tenant-e2e-shared-a-817aae/rate-test-model-817aae","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-817aae","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca2b6c","namespace":"ai-tenant-e2e-shared-a-817aae","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b3a2d79-8314-4e0f-bb70-9e8125b2cbd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"328f0133-81bc-41cf-aa38-fe0b438293fd","method":"POST","path":"/ai-tenant-e2e-shared-b-684339/rate-test-model-684339/v1/completions","host":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35596","PortSpecifier":{"PortValue":35596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784025635,"nanos":158580606},"http":{"id":"328f0133-81bc-41cf-aa38-fe0b438293fd","method":"POST","headers":{":authority":"e2e-shared-b-684339.apps.651b839e-80ae-4da9-a87e-85d221d08c98.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-684339/rate-test-model-684339/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5xi9uSMOOcZnD1Fe_rtsJcInuAEzRHQPS7slBQXtTMrLr6RBFE4DnhNmZV48"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5xi9uSMOOcZnD1Fe_rtsJcInuAEzRHQPS7slBQXtTMrLr6RBFE4DnhNmZV48\"}"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","keyName":"e2e-rate-b-ca2b6c","subscription":"e2e-rate-iso-b-ca2b6c","tenant":"e2e-shared-b-684339","userId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\",\"requestedSubscription\":\"e2e-rate-iso-b-ca2b6c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-684339.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-684339","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca2b6c","namespace":"ai-tenant-e2e-shared-b-684339","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-684339/rate-test-model-684339\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ca2b6c"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6becfe8c-2a56-45cb-83d3-978e7f552f03","keyName":"e2e-rate-b-ca2b6c","selected_subscription":"e2e-rate-iso-b-ca2b6c","selected_subscription_key":"ai-tenant-e2e-shared-b-684339/e2e-rate-iso-b-ca2b6c@ai-tenant-e2e-shared-b-684339/rate-test-model-684339","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-684339","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca2b6c","namespace":"ai-tenant-e2e-shared-b-684339","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T10:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"328f0133-81bc-41cf-aa38-fe0b438293fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b69318c5a0df1bbc2287ed31e7705ba3eb9948d86996c6b5ddd0c3d9b2084036"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/047041daf7cb2460f9ae005fa5e5b3c020baeca4e60ac333ceb06263e82c9f70"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/434a0c7c7777334161d229c479ba318b562807e1e49cde011ddc0c9fcb9050ed"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ac3a517726cd0d63de00f29414815014cb68c0804a5c66534225df21c5251a"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304dd68cf5603d37fab1859fe423f1c511640ddeef20467965a34019895e64c8"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ff5085b3498a98e3d3c403c3273a41e9f0700648a68aef38cb9f258cdd5b08f"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3db9ceeebd287b5c6ad7bfe776c7fd403e0ec31c77a8a21fae685d84ee85619b"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941daa6899f9570b3bcc53afbde5803b4b0969be2d6b94d8cf87d05a2f0321a7"} {"level":"info","ts":"2026-07-14T10:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6bcb1b15079bdd696606a3b0ff65c5233279110efc7878dcde32ea749d773a4"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4aa290a4a4ab94f7fe95c82c75f6351750e5fb32ea6e6b5ef77c39c4a54a6171"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f88390ce93f488de507af5c834eaf024f3b791bbc254bfee41129959dc7cf9"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39292ff23c2e75e92b3480c44e4e1b796fcc1e2df626131f34c935b6ebf94b01"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/753c6fb4148c5c1fce7f6519a079543655ee7a5fcdca6e38195a905b808779b1"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f1845baef34b47cd6732772fcace537e2636c9c95b65dcdae1210425584c4e9"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/552cebe349033478e0ccdcac59bc9ce0bf5e54c62d29917a9ce7f819ca41ccd3"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2d383aa05848b4cb012ce04d2ae1f94368e722d5ec2b77d17b3c7c0f8c9450a"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037d1a60cada54bcf38685470fcbc6ae9c2ca2908ce41eced9b4bd9a0a9a1f0f"} {"level":"info","ts":"2026-07-14T10:40:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/344e97bb51e0061b5dc3ebcb06657d6569cbc103e3a9d7f47d4aaa131f8b00b7"} {"level":"info","ts":"2026-07-14T10:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5b39441f70297d52bb1c40ae57d9a8c0a152e7b1fefcfbd13bfb349c00bb8ba"} {"level":"info","ts":"2026-07-14T10:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9e62b0bb6a5fd86fffafb237241dc69bc3f7223103e90031e3aa31e4d741540"}