--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7"} {"level":"info","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"error","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e"} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"error","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"} {"level":"info","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53988","PortSpecifier":{"PortValue":53988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53988","PortSpecifier":{"PortValue":53988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302694,"nanos":115978303},"http":{"id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed5562a-e300-42ba-9cba-21c926ac6a83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34604","PortSpecifier":{"PortValue":34604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34604","PortSpecifier":{"PortValue":34604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302694,"nanos":175518156},"http":{"id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e0fcf9d-976d-43bc-86dd-3085efd5f73b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53992","PortSpecifier":{"PortValue":53992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","method":"GET","path":"/maas-api/v1/api-keys/348c22bb-8281-4d01-ae4e-6ec3e6b64663","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53992","PortSpecifier":{"PortValue":53992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302694,"nanos":231912133},"http":{"id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","method":"GET","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/348c22bb-8281-4d01-ae4e-6ec3e6b64663",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/348c22bb-8281-4d01-ae4e-6ec3e6b64663",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"152f00ef-6a7e-4169-a907-90b5c52a57d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34608","PortSpecifier":{"PortValue":34608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","method":"GET","path":"/maas-api/v1/api-keys/87fcd40d-d26d-4943-bac6-d26e46b357b9","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34608","PortSpecifier":{"PortValue":34608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302694,"nanos":264611374},"http":{"id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","method":"GET","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/87fcd40d-d26d-4943-bac6-d26e46b357b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/87fcd40d-d26d-4943-bac6-d26e46b357b9",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0553a6e2-a7b3-4fa0-a3a4-6c093096bedf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34028","PortSpecifier":{"PortValue":34028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34028","PortSpecifier":{"PortValue":34028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302711,"nanos":606361150},"http":{"id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cbbb45b-9c8b-4268-a421-945d2fe64b06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41684","PortSpecifier":{"PortValue":41684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41684","PortSpecifier":{"PortValue":41684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302711,"nanos":651301390},"http":{"id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e7fafe-4ed1-4856-8954-1153ed82f1fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34042","PortSpecifier":{"PortValue":34042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34042","PortSpecifier":{"PortValue":34042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302711,"nanos":690973926},"http":{"id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","method":"GET","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ABGcqwbxMog8HQGP_Rb9eKV0HjLVJko2TknlZNo22dDdEnKwXGnW83QtbyMd"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ABGcqwbxMog8HQGP_Rb9eKV0HjLVJko2TknlZNo22dDdEnKwXGnW83QtbyMd\"}"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e3f23dea-2f3d-4781-b8b2-0bda2f507805","keyName":"e2e-auth-iso-a-fa0d48","subscription":"e2e-auth-iso-41e10e","tenant":"e2e-shared-a-c4e0c6","userId":"e3f23dea-2f3d-4781-b8b2-0bda2f507805","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-41e10e"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e2ea851-38c8-47d4-87d8-2f74d573eced","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:60064","PortSpecifier":{"PortValue":60064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:60064","PortSpecifier":{"PortValue":60064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302729,"nanos":27201369},"http":{"id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bd6ed4a-cc69-4b33-ba6c-7042e3f9d5bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"481f0f20-5e9d-4217-8995-b729906d968a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"481f0f20-5e9d-4217-8995-b729906d968a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"481f0f20-5e9d-4217-8995-b729906d968a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:40654","PortSpecifier":{"PortValue":40654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302729,"nanos":61631419},"http":{"id":"481f0f20-5e9d-4217-8995-b729906d968a","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"481f0f20-5e9d-4217-8995-b729906d968a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"481f0f20-5e9d-4217-8995-b729906d968a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"481f0f20-5e9d-4217-8995-b729906d968a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"481f0f20-5e9d-4217-8995-b729906d968a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"481f0f20-5e9d-4217-8995-b729906d968a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:40662","PortSpecifier":{"PortValue":40662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"054bfd0a-2056-4762-be88-cefbb52723ef","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:40662","PortSpecifier":{"PortValue":40662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302729,"nanos":94592080},"http":{"id":"054bfd0a-2056-4762-be88-cefbb52723ef","method":"GET","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ytxg7Rv7XQvc1MjU_WaT7jr4lccIbA1jfKssw3TQ9znCjGtYvALR2KTD6n7h"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ytxg7Rv7XQvc1MjU_WaT7jr4lccIbA1jfKssw3TQ9znCjGtYvALR2KTD6n7h\"}"} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T15:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"054bfd0a-2056-4762-be88-cefbb52723ef","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:50806","PortSpecifier":{"PortValue":50806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:50806","PortSpecifier":{"PortValue":50806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302753,"nanos":631070861},"http":{"id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebbcb19a-3b8c-42bb-9853-6989b0e599c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58632","PortSpecifier":{"PortValue":58632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"640669db-3d6d-4b10-a104-d68b477ff0d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58632","PortSpecifier":{"PortValue":58632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302753,"nanos":668478481},"http":{"id":"640669db-3d6d-4b10-a104-d68b477ff0d6","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640669db-3d6d-4b10-a104-d68b477ff0d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:50820","PortSpecifier":{"PortValue":50820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:50820","PortSpecifier":{"PortValue":50820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302753,"nanos":701771202},"http":{"id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce54acac-4e09-42c5-b4c0-9eae1d5057dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58636","PortSpecifier":{"PortValue":58636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58636","PortSpecifier":{"PortValue":58636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302753,"nanos":733907949},"http":{"id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"792bb237-0f43-4b5b-841d-7f5170ddcb5f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:55546","PortSpecifier":{"PortValue":55546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:55546","PortSpecifier":{"PortValue":55546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302778,"nanos":1698369},"http":{"id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43fd64ff-b8e3-4000-9117-e07d0ed32ff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:39094","PortSpecifier":{"PortValue":39094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:39094","PortSpecifier":{"PortValue":39094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302778,"nanos":39086719},"http":{"id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87f6f061-de8b-4f3e-9e51-4b52097824ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:39108","PortSpecifier":{"PortValue":39108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","method":"GET","path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:39108","PortSpecifier":{"PortValue":39108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302778,"nanos":76285230},"http":{"id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","method":"GET","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4e3c5d2-61ea-422f-8deb-b328b03ba55c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:55554","PortSpecifier":{"PortValue":55554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e93ad61-2505-4537-96be-7c8d6af410c2","method":"GET","path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:55554","PortSpecifier":{"PortValue":55554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302778,"nanos":107010151},"http":{"id":"5e93ad61-2505-4537-96be-7c8d6af410c2","method":"GET","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/12c2d925-e228-475b-901d-566f1dd27a67",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e93ad61-2505-4537-96be-7c8d6af410c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34558","PortSpecifier":{"PortValue":34558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04a94aea-7f47-460f-b625-466c4034bbc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34558","PortSpecifier":{"PortValue":34558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302797,"nanos":275940649},"http":{"id":"04a94aea-7f47-460f-b625-466c4034bbc4","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a94aea-7f47-460f-b625-466c4034bbc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:36052","PortSpecifier":{"PortValue":36052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:36052","PortSpecifier":{"PortValue":36052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302797,"nanos":312146004},"http":{"id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/auth-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0ea546-e5c9-44b2-8fa2-a32bca16ab9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:37078","PortSpecifier":{"PortValue":37078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:37078","PortSpecifier":{"PortValue":37078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302797,"nanos":343206179},"http":{"id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oG0JHK3HljhfNHtH_9b5tASozWEuiEom69bJC8NjlQ0MyawYB8uYbIMzuzRF"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oG0JHK3HljhfNHtH_9b5tASozWEuiEom69bJC8NjlQ0MyawYB8uYbIMzuzRF\"}"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"590baf1b-13e1-4aaf-97ff-b85595d373ab","keyName":"e2e-auth-iso-a-2c912b","subscription":"e2e-auth-iso-fa08a1","tenant":"e2e-shared-a-c4e0c6","userId":"590baf1b-13e1-4aaf-97ff-b85595d373ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/auth-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fa08a1"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:39:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7ff31f-5d21-45da-84e6-27cb7823d8e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87782e3ef43b8aefd4614f5f3b4d1095963b5aa006444165c8c1eb2414cbd51b"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58dcd045ccc3c31958f7c134ed03d7c4d45e3a65acff65de7d13c31a0be21362"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc9eb272dcb228c025255d69e7da75c8d5247145f5440d261a9965d4a96ba14"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab60bd1a0a4c9c26a5811252d67c47f5f35d8fa93b701242bb513ef7e601202"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55313d47956f6c147a269e3fededbdf85295a68ed108401343033ce694865aa9"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddb972aaec5c839d55435a54f37d8d97a5f76ee4cd660dc54d5457974452b7ec"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a7930ddc95fd802839f02e1d0b668ed3e3e4c5a3b61a4a7eda13efbdaa456f2"} {"level":"info","ts":"2026-07-17T15:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7120a0f95a76f488f782f62bc71ec297838c90b39344bc50bb1c1e50dfd6b861"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/370155ed3218b627b8105fab1c2c539f3a877396274333c864f081352834ba54"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11a25a89aa037bdd89e1b686c0f212575fc07c085bcc45d9cd4d8f698533598f"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27f834b6404370772d5dbd013c6b40039677fba66bca8b743bd812d84e1e40fb"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34f30a12dbc4a557b992f1db4da2e2033ca58c8d742c7b4adffe8d3be9742fd1"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a143fbf95f60c4ebee791f50c6cf7142998ab868b3700ec848ce844cec9f370e"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b62ffa0d99cccca16ebc2582a051b70d55494b9fa7297f35d9179ff1ee32a281"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8f4fb77fbab881e813d75487bd21dc61830e39931a0a2bd3602d4c5c30242fa"} {"level":"info","ts":"2026-07-17T15:40:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed7eea3d7bf529f3ee5a97255e26bc7305db118c68856ffee9e0825ed175828"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"error","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"error","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"error","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:40:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7"} {"level":"debug","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:43606","PortSpecifier":{"PortValue":43606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e87a635e-eedf-4640-9555-27fc8c2c1759","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:43606","PortSpecifier":{"PortValue":43606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302859,"nanos":814367317},"http":{"id":"e87a635e-eedf-4640-9555-27fc8c2c1759","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/sub-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e87a635e-eedf-4640-9555-27fc8c2c1759","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41554","PortSpecifier":{"PortValue":41554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"246e0363-e7c1-42a7-ae30-358388636a2a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41554","PortSpecifier":{"PortValue":41554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302859,"nanos":851905530},"http":{"id":"246e0363-e7c1-42a7-ae30-358388636a2a","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/sub-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"246e0363-e7c1-42a7-ae30-358388636a2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:43610","PortSpecifier":{"PortValue":43610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b195a15-c6e6-4906-8d5d-558dbf210450","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:43610","PortSpecifier":{"PortValue":43610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302859,"nanos":888307917},"http":{"id":"5b195a15-c6e6-4906-8d5d-558dbf210450","method":"GET","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17us7UaO9HOgYiibN_6TsMzvL2HEhzrj9JXPQA7rdQomqvmZ1cdSk20R1svg8"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17us7UaO9HOgYiibN_6TsMzvL2HEhzrj9JXPQA7rdQomqvmZ1cdSk20R1svg8\"}"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f7e07588-a404-43f8-93fd-410e2ecd37e3","keyName":"e2e-sub-iso-f2cc6e","subscription":"e2e-a-only-d6ffa0","tenant":"e2e-shared-a-c4e0c6","userId":"f7e07588-a404-43f8-93fd-410e2ecd37e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/sub-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d6ffa0"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b195a15-c6e6-4906-8d5d-558dbf210450","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41556","PortSpecifier":{"PortValue":41556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:41556","PortSpecifier":{"PortValue":41556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302859,"nanos":927303075},"http":{"id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","method":"GET","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Yzogm3OhiEwPFIsr_5al8SFeIXzFAb8tLdCHJ35Gchz3kwlwarKoVgHZLg4v"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Yzogm3OhiEwPFIsr_5al8SFeIXzFAb8tLdCHJ35Gchz3kwlwarKoVgHZLg4v\"}"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3ce9f543-a700-4c70-b942-359e0074900a","keyName":"e2e-sub-iso-9253ff","subscription":"e2e-b-only-d6ffa0","tenant":"e2e-shared-b-ae3cc1","userId":"3ce9f543-a700-4c70-b942-359e0074900a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/sub-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d6ffa0"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:40:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"315f2d61-5c37-4eb1-9deb-d3b0a951ae9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302869,"nanos":815067056},"http":{"id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/sub-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88e8cf92-86cc-43ca-bd38-4a188cd9a453","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53546","PortSpecifier":{"PortValue":53546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53546","PortSpecifier":{"PortValue":53546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302869,"nanos":849701794},"http":{"id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/sub-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ae25a3c-cd57-4ed8-9739-388391a1b25b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c06347-0136-4213-989c-d24b3d380141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96c06347-0136-4213-989c-d24b3d380141","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c06347-0136-4213-989c-d24b3d380141","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302869,"nanos":877212162},"http":{"id":"96c06347-0136-4213-989c-d24b3d380141","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VXLdi8SbYY50vg4l_SmyF5t77LDFlt9JQDK883MvTO2TwRYHYg9sl08NhEYh"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c06347-0136-4213-989c-d24b3d380141","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VXLdi8SbYY50vg4l_SmyF5t77LDFlt9JQDK883MvTO2TwRYHYg9sl08NhEYh\"}"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b3da1da8-1e6e-4846-89a2-622695a7624f","keyName":"e2e-sub-iso-85b8be","subscription":"e2e-shared-sub-8ba283","tenant":"e2e-shared-a-c4e0c6","userId":"b3da1da8-1e6e-4846-89a2-622695a7624f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96c06347-0136-4213-989c-d24b3d380141","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/sub-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c06347-0136-4213-989c-d24b3d380141","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ba283"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c06347-0136-4213-989c-d24b3d380141","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c06347-0136-4213-989c-d24b3d380141","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53554","PortSpecifier":{"PortValue":53554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:53554","PortSpecifier":{"PortValue":53554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302869,"nanos":905613233},"http":{"id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PY1OUl5S8oqx5afb_7r9XSQgpFlA62hqvYI1ugEM7tNiPBlDhfRupemIxgXC"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PY1OUl5S8oqx5afb_7r9XSQgpFlA62hqvYI1ugEM7tNiPBlDhfRupemIxgXC\"}"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"104d696a-2276-4c6b-8876-ac54360c6692","keyName":"e2e-sub-iso-a531a5","subscription":"e2e-shared-sub-8ba283","tenant":"e2e-shared-b-ae3cc1","userId":"104d696a-2276-4c6b-8876-ac54360c6692","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/sub-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8ba283"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:41:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5dfd69c-20db-48cb-b9d3-22c18cced196","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562415fc5771c08d62b9c5c5e3aa5a25ef6a61ea63e1272bbc1bc7476beae67f"} {"level":"info","ts":"2026-07-17T15:41:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce4aa338823e44c89e4162b8e013c700bb21eb9f13de84af5bc2bbe702091c7e"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bbd2fef1ce7334292f850e345b1e388d9fbe8821afdffaf94869875dd606927"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5acb69fdbd28137d0a15f8d65327c59ce1f38677f1ca34b3f96369158d404526"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f037e27acadea633b59ca9c2bfb01b3233015be4aa1193e7b6794b68b0c05f"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89f3b287117b106200911601c60026e6c8c82f3ce9e88fc8b795e488dd5e4a00"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87aab31ff10b69cd81594c3db4d3ca7e4f1a8a886231709eb451acd6e57da1d5"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3c8ce40ced9f569bf66ad4b27fc4a4bbae6f0298cd2a3568e47864ce7cee5bc"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b23b55c78af23f7d49094686bbe76a349a0c9d2d7fc35c0e6c244e3383be5a85"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c32966f7f2b0ac5c752832e181290aabce20ce2374e2119a0dd99b126393809"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69f1c799bce03d4abe5adbf55e52c609fe33c32fcf9b505a6aadb03665761ab"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8d095b75b89bc91aae32b2e5a76c97f2c44e430fbb4236373a7df5bb579e753"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fa622aba04cc9fd27ff43762b35d3363eb34198134f7adbd86cbc9f46950936"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a40ec7c288b2aa9c76a2c4f81ca9a71478a7d8cf4d4ebd395a64a9119ba0948"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2498490d80ed7a4f4c0cd64dce7214c715b33e793b1392c36c9fda077cffad"} {"level":"info","ts":"2026-07-17T15:41:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b19970cff1010217aad0de0b13c38c4d0f86b051a6cd35cac5540edd0ad6b254"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"error","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"} {"level":"error","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"error","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"error","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:41:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:41:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T15:42:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"debug","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"debug","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T15:42:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T15:42:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T15:42:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47674","PortSpecifier":{"PortValue":47674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47674","PortSpecifier":{"PortValue":47674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302940,"nanos":96825887},"http":{"id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbbefaa9-e493-45e9-85e9-1f10465933ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58620","PortSpecifier":{"PortValue":58620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58620","PortSpecifier":{"PortValue":58620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302940,"nanos":136275054},"http":{"id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dda8897b-a04f-4d58-b598-a6acc89d5a91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47684","PortSpecifier":{"PortValue":47684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fe298bf-b221-4597-ad20-1585cb93e707","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47684","PortSpecifier":{"PortValue":47684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302940,"nanos":174243690},"http":{"id":"3fe298bf-b221-4597-ad20-1585cb93e707","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX\"}"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","subscription":"e2e-rate-iso-a-698696","tenant":"e2e-shared-a-c4e0c6","userId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-698696\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-698696"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","selected_subscription":"e2e-rate-iso-a-698696","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-698696@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe298bf-b221-4597-ad20-1585cb93e707","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47700","PortSpecifier":{"PortValue":47700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03ba88fd-33f6-4083-81ee-390650fac6c5","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47700","PortSpecifier":{"PortValue":47700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302941,"nanos":233599646},"http":{"id":"03ba88fd-33f6-4083-81ee-390650fac6c5","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX\"}"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","subscription":"e2e-rate-iso-a-698696","tenant":"e2e-shared-a-c4e0c6","userId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-698696\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-698696"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","selected_subscription":"e2e-rate-iso-a-698696","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-698696@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ba88fd-33f6-4083-81ee-390650fac6c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47708","PortSpecifier":{"PortValue":47708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:47708","PortSpecifier":{"PortValue":47708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302942,"nanos":272296643},"http":{"id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11IxEM7YycezYfapt_uFqzqQuwGymLQMp58FOB7dRXUXPIoeUSFXuUEbNBfhX\"}"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","subscription":"e2e-rate-iso-a-698696","tenant":"e2e-shared-a-c4e0c6","userId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-698696\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-698696"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"669a88e0-21c7-40ca-a0a3-8c953ec0c9c2","keyName":"e2e-rate-a-698696","selected_subscription":"e2e-rate-iso-a-698696","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-698696@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-698696","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c3469f-dcce-4f4a-863b-c959dcc07bf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58418","PortSpecifier":{"PortValue":58418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58418","PortSpecifier":{"PortValue":58418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302955,"nanos":89310707},"http":{"id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dabf8cf-60f8-4b7a-aead-b2fa9af23cf3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011148f8-f251-9d21-b60e-16b997a09e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"011148f8-f251-9d21-b60e-16b997a09e91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"011148f8-f251-9d21-b60e-16b997a09e91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34682","PortSpecifier":{"PortValue":34682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302955,"nanos":128956293},"http":{"id":"011148f8-f251-9d21-b60e-16b997a09e91","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"011148f8-f251-9d21-b60e-16b997a09e91","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"]}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"011148f8-f251-9d21-b60e-16b997a09e91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c89680ba67b5"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54229b55-8317-4de6-9ad4-e194147b318e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"744f7cb3-9268-4e5f-8210-0675ea6823e6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"011148f8-f251-9d21-b60e-16b997a09e91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011148f8-f251-9d21-b60e-16b997a09e91","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"011148f8-f251-9d21-b60e-16b997a09e91","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58430","PortSpecifier":{"PortValue":58430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58430","PortSpecifier":{"PortValue":58430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302955,"nanos":160765854},"http":{"id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV\"}"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","subscription":"e2e-rate-iso-a-262d81","tenant":"e2e-shared-a-c4e0c6","userId":"90806dac-8f49-4e17-a3c1-d621f0a50617","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-262d81\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262d81"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","selected_subscription":"e2e-rate-iso-a-262d81","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-262d81@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"178fdec8-dee9-48b1-a68a-89ae1a0dcef4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302956,"nanos":205759166},"http":{"id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV\"}"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","subscription":"e2e-rate-iso-a-262d81","tenant":"e2e-shared-a-c4e0c6","userId":"90806dac-8f49-4e17-a3c1-d621f0a50617","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-262d81\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262d81"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","selected_subscription":"e2e-rate-iso-a-262d81","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-262d81@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5abe819-fe4d-41d1-a8fd-38e626b4ccfb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58448","PortSpecifier":{"PortValue":58448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","method":"POST","path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions","host":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:58448","PortSpecifier":{"PortValue":58448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302957,"nanos":244907006},"http":{"id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","method":"POST","headers":{":authority":"e2e-shared-a-c4e0c6.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dVQeL0UFn37yv3i_IhCooz4l7757WqmQRTb7CjvHzMGj0VnOR8dNiQvBAZV\"}"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","subscription":"e2e-rate-iso-a-262d81","tenant":"e2e-shared-a-c4e0c6","userId":"90806dac-8f49-4e17-a3c1-d621f0a50617","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\",\"requestedSubscription\":\"e2e-rate-iso-a-262d81\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c4e0c6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c4e0c6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-262d81"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"90806dac-8f49-4e17-a3c1-d621f0a50617","keyName":"e2e-rate-a-262d81","selected_subscription":"e2e-rate-iso-a-262d81","selected_subscription_key":"ai-tenant-e2e-shared-a-c4e0c6/e2e-rate-iso-a-262d81@ai-tenant-e2e-shared-a-c4e0c6/rate-test-model-c4e0c6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c4e0c6","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-262d81","namespace":"ai-tenant-e2e-shared-a-c4e0c6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f074a2d1-c0ee-4ede-8657-feecc16417b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85e99924-443a-440e-be63-6769f3d90b86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34692","PortSpecifier":{"PortValue":34692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85e99924-443a-440e-be63-6769f3d90b86","method":"POST","path":"/ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1/v1/completions","host":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85e99924-443a-440e-be63-6769f3d90b86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.6:34692","PortSpecifier":{"PortValue":34692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784302957,"nanos":275512943},"http":{"id":"85e99924-443a-440e-be63-6769f3d90b86","method":"POST","headers":{":authority":"e2e-shared-b-ae3cc1.apps.5df6a3cf-c7fd-4805-b84a-c89680ba67b5.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MDPvpQg4ehKqo2x4_MUeqdqLD09mOaY54GnFD7D8w59aYx2XKUHQWegmWjVM"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MDPvpQg4ehKqo2x4_MUeqdqLD09mOaY54GnFD7D8w59aYx2XKUHQWegmWjVM\"}"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"846fbb37-2ec2-4ec8-8d6f-dc5e14167548","keyName":"e2e-rate-b-262d81","subscription":"e2e-rate-iso-b-262d81","tenant":"e2e-shared-b-ae3cc1","userId":"846fbb37-2ec2-4ec8-8d6f-dc5e14167548","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1\",\"requestedSubscription\":\"e2e-rate-iso-b-262d81\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ae3cc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ae3cc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-262d81","namespace":"ai-tenant-e2e-shared-b-ae3cc1","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85e99924-443a-440e-be63-6769f3d90b86","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ae3cc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-262d81"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85e99924-443a-440e-be63-6769f3d90b86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"846fbb37-2ec2-4ec8-8d6f-dc5e14167548","keyName":"e2e-rate-b-262d81","selected_subscription":"e2e-rate-iso-b-262d81","selected_subscription_key":"ai-tenant-e2e-shared-b-ae3cc1/e2e-rate-iso-b-262d81@ai-tenant-e2e-shared-b-ae3cc1/rate-test-model-ae3cc1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ae3cc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-262d81","namespace":"ai-tenant-e2e-shared-b-ae3cc1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85e99924-443a-440e-be63-6769f3d90b86","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T15:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85e99924-443a-440e-be63-6769f3d90b86","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/411915fb5dcda62f2854013be6110d438f7bf117f8bb2c8b4af6024899d8af21"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27234b145a3217c19ae484a909a30b05b8c614b941b19b22606faf0e8f80c03f"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fda422e51ed67259fd8d76436c31a93738d8f46047b7fd2dd67267507683ea39"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2446f6ddbdf46294cd08ab939e4f029b7d2d3fbff3a897cc3dd1d04466810f1c"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a42414066f13448367bd4c25a4495d4a18e89912b81d41bf752e1965f2b56e48"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d53f627d56ef20b3a35a59e1cc40a9c0b46432f7498300d4492a7f88056b9c5b"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f93c0b84bb2899c10bd02acaf272f038954de77f188e810095a27f28d340dda"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5c6c7f4372877da8259da0ae1860ce8d9099ad57b0a5bbae23a9463cd3115d2"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6293259c5b47d2479d148f9b541b83ac69c2e46e7daa549cd6235b5e3df68dbc"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d4da2c0a5c78545d648f54ae1780da4c013f8fefe9e8e1ac83ebea86ca8025f"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/036674fe46474eaca0e0230bffb6c875128f5d293f06db9d49dd08a29e801ab4"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c11563317de523c27b09f4b7f24fe4724b0face4bcbcd7adef55383d24f4130"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae45bcabff9c1d7bd34b7566543ca2772643490a01de5d4a1ecd72b04ff95364"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aa79164a497f5c14e2cea28ad114ed4567812479826f08326c113b8237dbffe"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64c74358842cfdf960740c7e844261821002eb1876f1cdc7daea3be68e1fb5a6"} {"level":"info","ts":"2026-07-17T15:42:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9da50204e49ccca7b4000e51f65053464e49424d8846796ed7b9f24c30dffc62"} {"level":"info","ts":"2026-07-17T15:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09b6dabb97b3c5b5485948db9c2a439d12816ff2eab630498f1b8088f647d84a"} {"level":"info","ts":"2026-07-17T15:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d81fb5df07a5a7d87c977ca5c62692ad8cf8668b28522342bf70e6e74bd71be7"} {"level":"info","ts":"2026-07-17T15:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/166fc0dd2ede295677366a01dcd4b7498fed8fb579121791bfe178469fe53770"} {"level":"info","ts":"2026-07-17T15:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/581672ae67188c89b2f486d8cb18dbc770b034875b8644d473d5516673854c23"} {"level":"info","ts":"2026-07-17T15:43:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3c3eac3b141b608724eb096c10e6a85cba2a204eab438673190d8d85f05ed9"} {"level":"info","ts":"2026-07-17T15:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ae3331f603e4505cc1ee657d743fb071acc3feb8491bbd6a606fe707d993587"} {"level":"info","ts":"2026-07-17T15:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e831ed5dbef3637bd01f2d8c1134cb4c991d451ae6eb219460d341129a5e0a6b"} {"level":"info","ts":"2026-07-17T15:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/271eebdd518f577584e9a07d7aab0eb1ed25fd2cdb9303c75d237f2f319f4f92"}