--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210"} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4"} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4"} {"level":"info","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f"} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88"} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462"} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88"} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"error","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:01:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:01:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50822","PortSpecifier":{"PortValue":50822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50822","PortSpecifier":{"PortValue":50822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120488,"nanos":431979225},"http":{"id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ffe988f-2cf7-4c2b-ba6f-f31dffb88a1d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46830","PortSpecifier":{"PortValue":46830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46830","PortSpecifier":{"PortValue":46830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120488,"nanos":486259287},"http":{"id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08d07fbe-102f-46a0-80fb-729a510d5b5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50826","PortSpecifier":{"PortValue":50826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","method":"GET","path":"/maas-api/v1/api-keys/cd1794ca-1e17-4890-b13c-9de559195d10","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50826","PortSpecifier":{"PortValue":50826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120488,"nanos":539086020},"http":{"id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","method":"GET","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cd1794ca-1e17-4890-b13c-9de559195d10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cd1794ca-1e17-4890-b13c-9de559195d10",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6d26adc-4911-4455-9e14-e2e9d2c07bc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46834","PortSpecifier":{"PortValue":46834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","method":"GET","path":"/maas-api/v1/api-keys/b582318a-0f3b-48cd-97ab-e4b1b567cafc","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46834","PortSpecifier":{"PortValue":46834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120488,"nanos":572106437},"http":{"id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","method":"GET","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b582318a-0f3b-48cd-97ab-e4b1b567cafc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b582318a-0f3b-48cd-97ab-e4b1b567cafc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0034dfd-903b-4051-acb4-890d3c6e56d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55250","PortSpecifier":{"PortValue":55250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120505,"nanos":819854404},"http":{"id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"416b4897-6b76-4bb4-90d7-3a4aeba7291d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47322","PortSpecifier":{"PortValue":47322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddef089b-4aaf-9cad-be79-05a59d255f43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47322","PortSpecifier":{"PortValue":47322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120505,"nanos":855047046},"http":{"id":"ddef089b-4aaf-9cad-be79-05a59d255f43","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddef089b-4aaf-9cad-be79-05a59d255f43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55258","PortSpecifier":{"PortValue":55258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43b47267-993d-4c30-a44c-59a96fdd309d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55258","PortSpecifier":{"PortValue":55258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120505,"nanos":892462549},"http":{"id":"43b47267-993d-4c30-a44c-59a96fdd309d","method":"GET","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZNKDyRZYE5U1BURp_ALFwfi1O8r0qaTzhaXmeYHucbYgtEWOtVqUcqWdlo8J"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZNKDyRZYE5U1BURp_ALFwfi1O8r0qaTzhaXmeYHucbYgtEWOtVqUcqWdlo8J\"}"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f2eb9077-0377-41d0-afce-3e29ef6366b4","keyName":"e2e-auth-iso-a-8b00af","subscription":"e2e-auth-iso-28b9f9","tenant":"e2e-shared-a-3af497","userId":"f2eb9077-0377-41d0-afce-3e29ef6366b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-28b9f9"} {"level":"info","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:01:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43b47267-993d-4c30-a44c-59a96fdd309d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c800976f-3431-486a-8d17-36f1e26e6496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c800976f-3431-486a-8d17-36f1e26e6496","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c800976f-3431-486a-8d17-36f1e26e6496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120521,"nanos":99634496},"http":{"id":"c800976f-3431-486a-8d17-36f1e26e6496","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c800976f-3431-486a-8d17-36f1e26e6496","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c800976f-3431-486a-8d17-36f1e26e6496","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c800976f-3431-486a-8d17-36f1e26e6496","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c800976f-3431-486a-8d17-36f1e26e6496","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c800976f-3431-486a-8d17-36f1e26e6496","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50528","PortSpecifier":{"PortValue":50528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50528","PortSpecifier":{"PortValue":50528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120521,"nanos":132665170},"http":{"id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6badf8d2-1e90-454e-9f40-d65c34d00a43","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50534","PortSpecifier":{"PortValue":50534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f496651-6773-4f52-8f10-d300fa8807ba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50534","PortSpecifier":{"PortValue":50534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120521,"nanos":174340097},"http":{"id":"1f496651-6773-4f52-8f10-d300fa8807ba","method":"GET","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KaDS1CTBES3QRcEE_t5q1nLP5pJM9MBOWJaf1AEH5tkHeLW4qtXAR8A3hjoo"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KaDS1CTBES3QRcEE_t5q1nLP5pJM9MBOWJaf1AEH5tkHeLW4qtXAR8A3hjoo\"}"} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-15T13:02:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f496651-6773-4f52-8f10-d300fa8807ba","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42886","PortSpecifier":{"PortValue":42886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42886","PortSpecifier":{"PortValue":42886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120540,"nanos":504543674},"http":{"id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4de209d4-c057-4a4f-9983-34cc16a42f2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47476","PortSpecifier":{"PortValue":47476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bfa02dd-abad-4d79-8160-db07c91f244f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47476","PortSpecifier":{"PortValue":47476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120540,"nanos":545695094},"http":{"id":"3bfa02dd-abad-4d79-8160-db07c91f244f","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bfa02dd-abad-4d79-8160-db07c91f244f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42890","PortSpecifier":{"PortValue":42890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42890","PortSpecifier":{"PortValue":42890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120540,"nanos":586006209},"http":{"id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4c04f89-cbbd-4d94-8654-f96ea63b84a8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47484","PortSpecifier":{"PortValue":47484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47484","PortSpecifier":{"PortValue":47484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120540,"nanos":620006215},"http":{"id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e73e4a-6ffe-4e3c-a5ea-de92a70beca7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57794","PortSpecifier":{"PortValue":57794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d73687f7-54ec-4841-b943-150b5f8da8ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57794","PortSpecifier":{"PortValue":57794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120557,"nanos":776804962},"http":{"id":"d73687f7-54ec-4841-b943-150b5f8da8ab","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73687f7-54ec-4841-b943-150b5f8da8ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35836","PortSpecifier":{"PortValue":35836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35836","PortSpecifier":{"PortValue":35836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120557,"nanos":808579814},"http":{"id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fd97783-96d6-4d28-9b61-b4959f6879bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35842","PortSpecifier":{"PortValue":35842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","method":"GET","path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35842","PortSpecifier":{"PortValue":35842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120557,"nanos":852626516},"http":{"id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","method":"GET","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb6de3ad-7850-4fec-9ce2-7f372572ecbb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57804","PortSpecifier":{"PortValue":57804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","method":"GET","path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57804","PortSpecifier":{"PortValue":57804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120557,"nanos":886688107},"http":{"id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","method":"GET","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94ba59dc-39d3-4228-9e18-0f00bf232452",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd5b7fb-8aec-49a6-abcd-57c3e7dd8b2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44310","PortSpecifier":{"PortValue":44310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44310","PortSpecifier":{"PortValue":44310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120577,"nanos":221455823},"http":{"id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b2824d-d5fb-41b8-8588-8ae77637a5b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33936","PortSpecifier":{"PortValue":33936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33936","PortSpecifier":{"PortValue":33936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120577,"nanos":255999503},"http":{"id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/auth-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e77ed6-bcec-4b62-b65e-1c37d29c4292","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44318","PortSpecifier":{"PortValue":44318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44318","PortSpecifier":{"PortValue":44318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120577,"nanos":288719190},"http":{"id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AIKlBe6wlaCjsoAw_rtSom5yi2MnBX7NJoIW4tkg00rnb5qI9TzLSBfzGbXx"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AIKlBe6wlaCjsoAw_rtSom5yi2MnBX7NJoIW4tkg00rnb5qI9TzLSBfzGbXx\"}"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"577ff5d4-16e2-44a4-b0d1-6850a6e30725","keyName":"e2e-auth-iso-a-929848","subscription":"e2e-auth-iso-49ce5a","tenant":"e2e-shared-a-3af497","userId":"577ff5d4-16e2-44a4-b0d1-6850a6e30725","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/auth-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-49ce5a"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:02:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de0f2de-9241-469f-a223-bfc7daab3b3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6d63622a03ead71fc14402beb25a5759c5259431e38e071f77d1102783fcd6e"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fa9a6a96564468fb4f2305b9d888ba787651799a49f41e6b9ea70e4022963d4"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d432da7b1c9f537ded75b8b274a1ae575bcdee2d28ae19e34939e7579636cbff"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf20dea349b775a85cfaaee91d777685b1ba51623e4fabcef5326cf4d767fe8d"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab17696ba1a552b10edb9b2cf6df8defb312483c4f581bf0069f9512a9fd0f8f"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2874f6915e6b6de6bde6355c50e7a0b92a08a9e3962c066697180ef324290210"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cd6e5fc52aba74f51ff8f67c922e711c450e31a7b6dc55a3d4c4d2978d8d47b"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc8c4dc5f257c4996aed24072255ff398a1e541c6f4b92b306d2f3000f53a546"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f41a1b1131c4f8750e3ef84e86874c972c727600235cad213461e681d1842fdd"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a2def150cd82ac9efb4f84e6385b672635af29dbe983076cbfc96965ade1e4"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46ae6ad3f0bef89330c0c49bb2fc6154fb3bd543e02a5aaf67cd4c61c17eedcf"} {"level":"info","ts":"2026-07-15T13:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a392883cdd90f592e46c06cb8eba59eaa58a231d4d4ad543df4a2988540ec4a7"} {"level":"info","ts":"2026-07-15T13:03:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/919046559bb6be30f8b05e216aa4f83c93b9644d5c9ae0bf9882bf610c4f2462"} {"level":"info","ts":"2026-07-15T13:03:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/800c22a4dcffc51d728cbcd8353cee6b935bdc5c5185b459fe86e2b376ebae88"} {"level":"info","ts":"2026-07-15T13:03:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec7e367841e6815d730b30116c1a69372fcfafa2a0efb2c3b243c100890a3884"} {"level":"info","ts":"2026-07-15T13:03:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77eb4cace7e6a89a033907f9038a1201bcf3bd16a88c56eba8c58b1351bd20b3"} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"error","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"error","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"error","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"error","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"error","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:03:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:03:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"debug","ts":"2026-07-15T13:04:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"debug","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"error","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"error","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"error","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:04:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:04:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33850","PortSpecifier":{"PortValue":33850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77f39bc5-20b3-4415-bbd5-69b306482a37","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33850","PortSpecifier":{"PortValue":33850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120678,"nanos":931352663},"http":{"id":"77f39bc5-20b3-4415-bbd5-69b306482a37","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/sub-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f39bc5-20b3-4415-bbd5-69b306482a37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45316","PortSpecifier":{"PortValue":45316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51cc8770-b203-4d4b-baf6-f617112618c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45316","PortSpecifier":{"PortValue":45316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120678,"nanos":977253743},"http":{"id":"51cc8770-b203-4d4b-baf6-f617112618c3","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/sub-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51cc8770-b203-4d4b-baf6-f617112618c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4978155-5fc2-43af-9734-b727d136b945","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4978155-5fc2-43af-9734-b727d136b945","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4978155-5fc2-43af-9734-b727d136b945","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120679,"nanos":17070440},"http":{"id":"a4978155-5fc2-43af-9734-b727d136b945","method":"GET","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QwPEj1XOna6H4EFt_d5WOH88K3JZpLNBJGs6BCFN54wCw4FtXC5vPjvzOJMv"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QwPEj1XOna6H4EFt_d5WOH88K3JZpLNBJGs6BCFN54wCw4FtXC5vPjvzOJMv\"}"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a010f25-9b00-4014-a1e3-98d9173c108c","keyName":"e2e-sub-iso-175efb","subscription":"e2e-a-only-101659","tenant":"e2e-shared-a-3af497","userId":"1a010f25-9b00-4014-a1e3-98d9173c108c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4978155-5fc2-43af-9734-b727d136b945","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/sub-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4978155-5fc2-43af-9734-b727d136b945","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-101659"} {"level":"info","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4978155-5fc2-43af-9734-b727d136b945","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4978155-5fc2-43af-9734-b727d136b945","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45320","PortSpecifier":{"PortValue":45320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45320","PortSpecifier":{"PortValue":45320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120679,"nanos":60245009},"http":{"id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","method":"GET","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8LEOCg7xJDTRLn9R_oyfR7Ayc8mD05pRf4FieBEhiAhHRdkeUOImymeslnkO"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8LEOCg7xJDTRLn9R_oyfR7Ayc8mD05pRf4FieBEhiAhHRdkeUOImymeslnkO\"}"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e699288d-0407-428f-8d81-64f5f1c18d73","keyName":"e2e-sub-iso-170179","subscription":"e2e-b-only-101659","tenant":"e2e-shared-b-70ed7b","userId":"e699288d-0407-428f-8d81-64f5f1c18d73","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/sub-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-101659"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26bb1bda-6d52-4237-bce4-72b1a556ca54","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38882","PortSpecifier":{"PortValue":38882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38882","PortSpecifier":{"PortValue":38882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120695,"nanos":441999543},"http":{"id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/sub-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de4dfd20-db00-46f8-a7a8-a4e91f784003","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59472","PortSpecifier":{"PortValue":59472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120695,"nanos":481704780},"http":{"id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/sub-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"705cd22d-b63d-4760-88cb-f3bbcc70f0f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38890","PortSpecifier":{"PortValue":38890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120695,"nanos":516817668},"http":{"id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1V8G9VAIpLWAs0Oc6_Sv000FGtmbGM4EsKqb5maytHr0RF9FrbyampG2FC80w"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1V8G9VAIpLWAs0Oc6_Sv000FGtmbGM4EsKqb5maytHr0RF9FrbyampG2FC80w\"}"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97bfd615-f2ad-45b7-8eb9-503fc4f0c94e","keyName":"e2e-sub-iso-77b17e","subscription":"e2e-shared-sub-c59a95","tenant":"e2e-shared-a-3af497","userId":"97bfd615-f2ad-45b7-8eb9-503fc4f0c94e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/sub-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c59a95"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb69ad1-b776-4f0e-b7b6-b8835687a1de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59476","PortSpecifier":{"PortValue":59476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59476","PortSpecifier":{"PortValue":59476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120695,"nanos":552137015},"http":{"id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dn4M8hHDYKzwQtZx_jPdlPUeeeuK2SoYLELbS9N9Y0kNizTQkeSa2CRhCsai"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dn4M8hHDYKzwQtZx_jPdlPUeeeuK2SoYLELbS9N9Y0kNizTQkeSa2CRhCsai\"}"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"351ab136-1fa8-46b7-a729-e56e8d85bce9","keyName":"e2e-sub-iso-b7dfaa","subscription":"e2e-shared-sub-c59a95","tenant":"e2e-shared-b-70ed7b","userId":"351ab136-1fa8-46b7-a729-e56e8d85bce9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/sub-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c59a95"} {"level":"info","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:04:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d1acdd-01ee-45b3-b4c3-5445dc0a2855","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9bb1cf9bbc32ccc6b7781111340effc64284b2fb3c6f8c721fe371ec017aae"} {"level":"info","ts":"2026-07-15T13:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9ff1aa7de9ebe9787b938cc1eb502d83016649b5da9609f42b8fb2b1c5831e6"} {"level":"info","ts":"2026-07-15T13:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07c86aa2101b6a6aa46ca1a2590d249cc26ca2ebc6b2c80e605ecc9c6a7734ab"} {"level":"info","ts":"2026-07-15T13:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b5fdda9a936c6cdfabb3e9060684bab4c9a6cc4cf83a47dbc266f8ca5e19c12"} {"level":"info","ts":"2026-07-15T13:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/949453c5584d890222dd6c53160149b2a7e61904cefd3617be1b090adabe946f"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88568432ab777c00aa649db127fb229b844e697b468c8f5e2c057a81b55bb39"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29bb591fb078951815fee7cb5a148f57e2bb1b1262adb0243da44a49d4bf9f75"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85fc7333953cb1ebbc71472185ccfa0e99cac229e1ef868550c042e12f750c39"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cc4342dc5a5536495040ff49209646e0d8f6c291a67d7f35e77ba7130f1276b"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a99bd40d762a0dafc200c96821deae1630facbe05ab560c80571ebf814df2062"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ba3ebda7fc58684bf93233a3f1faf8e55cc2d2ccd99e16d3abff2a82707b709"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ccb7cf395b999da8ae615139475705113c66a3ddba59ae4e678880731850c62"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e979a15761a5af4d9ff536e1d76da083741026f464913fee9a49da147f4ede9"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d301212351f9582240722f56332443ff7f8ead19e6de4f095a00aba0b7787243"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0220752b1a12a661e519044e8a670e15ba8aaa5e55ae2f46e175de177607322"} {"level":"info","ts":"2026-07-15T13:05:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ad9282f34190f38f8116eb99ed8bfe6d73fb4ed91c2d055107044a1b8b89381"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"error","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"} {"level":"error","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"error","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"info","ts":"2026-07-15T13:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:05:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:05:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"debug","ts":"2026-07-15T13:06:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"error","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"error","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:06:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"info","ts":"2026-07-15T13:06:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T13:06:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:06:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49322","PortSpecifier":{"PortValue":49322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"609649f5-0519-4b1e-b9ae-bda43ed23284","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49322","PortSpecifier":{"PortValue":49322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120778,"nanos":435687615},"http":{"id":"609649f5-0519-4b1e-b9ae-bda43ed23284","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609649f5-0519-4b1e-b9ae-bda43ed23284","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72af40ad-070d-4053-a524-632931bdec03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37864","PortSpecifier":{"PortValue":37864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72af40ad-070d-4053-a524-632931bdec03","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72af40ad-070d-4053-a524-632931bdec03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37864","PortSpecifier":{"PortValue":37864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120778,"nanos":489026223},"http":{"id":"72af40ad-070d-4053-a524-632931bdec03","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72af40ad-070d-4053-a524-632931bdec03","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72af40ad-070d-4053-a524-632931bdec03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72af40ad-070d-4053-a524-632931bdec03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72af40ad-070d-4053-a524-632931bdec03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72af40ad-070d-4053-a524-632931bdec03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49336","PortSpecifier":{"PortValue":49336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49336","PortSpecifier":{"PortValue":49336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120778,"nanos":537841580},"http":{"id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y\"}"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","subscription":"e2e-rate-iso-a-13d4a2","tenant":"e2e-shared-a-3af497","userId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-13d4a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13d4a2"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","selected_subscription":"e2e-rate-iso-a-13d4a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-13d4a2@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a246637-e2f6-466e-bb77-ad70f5a4bbda","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49350","PortSpecifier":{"PortValue":49350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49350","PortSpecifier":{"PortValue":49350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120779,"nanos":607233125},"http":{"id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y\"}"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","subscription":"e2e-rate-iso-a-13d4a2","tenant":"e2e-shared-a-3af497","userId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-13d4a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13d4a2"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","selected_subscription":"e2e-rate-iso-a-13d4a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-13d4a2@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"652551bf-3897-41c1-a0e5-ac15f98f8fc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147af59b-8b70-4c94-bdee-613e45826c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46394","PortSpecifier":{"PortValue":46394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"147af59b-8b70-4c94-bdee-613e45826c70","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"147af59b-8b70-4c94-bdee-613e45826c70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46394","PortSpecifier":{"PortValue":46394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120780,"nanos":648579976},"http":{"id":"147af59b-8b70-4c94-bdee-613e45826c70","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JKR1zOkVzdRWYiIT_CGjLbC0VHhBqCAj6hyQ7fYvHhIAV956UdmjXy3c4R7y\"}"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","subscription":"e2e-rate-iso-a-13d4a2","tenant":"e2e-shared-a-3af497","userId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-13d4a2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"147af59b-8b70-4c94-bdee-613e45826c70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-13d4a2"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"147af59b-8b70-4c94-bdee-613e45826c70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"89cb016b-4d1f-4aa7-bf8d-ff8194d7a9ec","keyName":"e2e-rate-a-13d4a2","selected_subscription":"e2e-rate-iso-a-13d4a2","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-13d4a2@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-13d4a2","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147af59b-8b70-4c94-bdee-613e45826c70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"147af59b-8b70-4c94-bdee-613e45826c70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44478","PortSpecifier":{"PortValue":44478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44478","PortSpecifier":{"PortValue":44478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120793,"nanos":584102774},"http":{"id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f7286b1-27cc-48b9-8aaf-76446bdc1589","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48660","PortSpecifier":{"PortValue":48660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18e18319-9551-4753-9cf9-3488041cf4fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48660","PortSpecifier":{"PortValue":48660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120793,"nanos":622150055},"http":{"id":"18e18319-9551-4753-9cf9-3488041cf4fb","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"]}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8a638d10f242"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7126cea-2f32-4774-a962-f3014dc26036"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de152d00-cb29-4e1c-9366-bc7a0614b1b8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18e18319-9551-4753-9cf9-3488041cf4fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44480","PortSpecifier":{"PortValue":44480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44480","PortSpecifier":{"PortValue":44480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120793,"nanos":658608958},"http":{"id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98\"}"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","subscription":"e2e-rate-iso-a-345406","tenant":"e2e-shared-a-3af497","userId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-345406\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-345406"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","selected_subscription":"e2e-rate-iso-a-345406","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-345406@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f5b126e-9c01-4223-8652-5b9bdb4b0bb0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12de8201-bbab-4c35-aef8-42f76cc4e721","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120794,"nanos":701492142},"http":{"id":"12de8201-bbab-4c35-aef8-42f76cc4e721","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98\"}"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","subscription":"e2e-rate-iso-a-345406","tenant":"e2e-shared-a-3af497","userId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-345406\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-345406"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","selected_subscription":"e2e-rate-iso-a-345406","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-345406@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12de8201-bbab-4c35-aef8-42f76cc4e721","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44504","PortSpecifier":{"PortValue":44504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ddb1008-0047-4a8d-9035-4de5375c4158","method":"POST","path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions","host":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44504","PortSpecifier":{"PortValue":44504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120795,"nanos":739078790},"http":{"id":"7ddb1008-0047-4a8d-9035-4de5375c4158","method":"POST","headers":{":authority":"e2e-shared-a-3af497.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ItjZs7KULLrGfrEN_8HEdcd5xY67FGN8dLdJOrwxZq064XeC5xSUltNRaM98\"}"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","subscription":"e2e-rate-iso-a-345406","tenant":"e2e-shared-a-3af497","userId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\",\"requestedSubscription\":\"e2e-rate-iso-a-345406\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-3af497.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-3af497/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-345406"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f3815df8-6cb1-4a1a-9f18-b5cf152fc367","keyName":"e2e-rate-a-345406","selected_subscription":"e2e-rate-iso-a-345406","selected_subscription_key":"ai-tenant-e2e-shared-a-3af497/e2e-rate-iso-a-345406@ai-tenant-e2e-shared-a-3af497/rate-test-model-3af497","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3af497","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-345406","namespace":"ai-tenant-e2e-shared-a-3af497","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ddb1008-0047-4a8d-9035-4de5375c4158","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48670","PortSpecifier":{"PortValue":48670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cc591b1-c157-4d75-881f-6a1c2d093018","method":"POST","path":"/ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b/v1/completions","host":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48670","PortSpecifier":{"PortValue":48670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784120795,"nanos":778744534},"http":{"id":"2cc591b1-c157-4d75-881f-6a1c2d093018","method":"POST","headers":{":authority":"e2e-shared-b-70ed7b.apps.a1b4a873-d2dc-4f69-927f-8a638d10f242.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hhiqe1Gg0zygGPzd_m1TdINVIiYbYR8dSukUIISpT8FrZK0O878qGCBsh3te"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hhiqe1Gg0zygGPzd_m1TdINVIiYbYR8dSukUIISpT8FrZK0O878qGCBsh3te\"}"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a6407c2f-757e-49e6-bf89-bd2b73f6dfa3","keyName":"e2e-rate-b-345406","subscription":"e2e-rate-iso-b-345406","tenant":"e2e-shared-b-70ed7b","userId":"a6407c2f-757e-49e6-bf89-bd2b73f6dfa3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b\",\"requestedSubscription\":\"e2e-rate-iso-b-345406\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-70ed7b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70ed7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-345406","namespace":"ai-tenant-e2e-shared-b-70ed7b","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-70ed7b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-345406"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a6407c2f-757e-49e6-bf89-bd2b73f6dfa3","keyName":"e2e-rate-b-345406","selected_subscription":"e2e-rate-iso-b-345406","selected_subscription_key":"ai-tenant-e2e-shared-b-70ed7b/e2e-rate-iso-b-345406@ai-tenant-e2e-shared-b-70ed7b/rate-test-model-70ed7b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70ed7b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-345406","namespace":"ai-tenant-e2e-shared-b-70ed7b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T13:06:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc591b1-c157-4d75-881f-6a1c2d093018","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T13:06:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/580f89458caf64d9774a4e04f62dd5f78015effaf31a73f988affc21ff0bd97d"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d39fd28e71ff1a13d917af3ee2e11423ebd11e363b6740126f60e1e82c61cc5d"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3068bfb2fe21c8f5a3b67ecbcecf62e90d72083260836a30695712da99d4a65e"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4f7a2f40ffc600740583d4dbf367d174dcbb94b5816a0edc39f6ba659a95f51"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b09a1bdfe32dfe1a94f62621100aa3eda0026282c1f2f1f9672cdb184c965d2f"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83bbfd6a35e7a3aeaffa5c11d2e1ae8f02f735b02dcf7ff4b72b449ca14d1863"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24f28ff1bb63ae56a065bc36052405226653edd191d8ba6f9fcd2b008dff0319"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07630ad3ee65c132627e38d5f31f6c0807e95406622adffd076d07d7a7768f47"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98e0c47bf47b9932910c5dd810e52779016814a28f040438dec72267400913f5"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63852d3c909c4d2c90346c559c16ab6561e9ae8d5a71ce01c27dc7f4ca8d63ac"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4d283909e9cc7305791a6f1cc6e9733b9ee15644bd702d975d95dbdef12c562"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48b7944a47a07f18aefceb51e98f3dae4a8294c3df67262838fcae0a36ba71e4"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eea33b7167c472716830f7ad5c0cbd81d8de4f48f3b5609f567e94842c2bcda4"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cba4a9e12c8f7cc6244763fa87abb8badda92d633b711322ba78998ae66fd971"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a0e5ecf7302b12b1a8b30a06f1a473547a87f92c5e40371a599305fd3e36e49"} {"level":"info","ts":"2026-07-15T13:06:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08c51118f9d9735f321b14a7e94aa6d8673da92bde1b9f791b0b7cf2684aa55f"} {"level":"info","ts":"2026-07-15T13:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ca9bd1d390cb1d7b3937c90b6d6670ce2cab7d854dad2410c40ae74a39c5876"} {"level":"info","ts":"2026-07-15T13:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ce851e8989652c71851514131e56baa38a7406a93295ec8109779f412b0a50"} {"level":"info","ts":"2026-07-15T13:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f0a523ffc8a38a35e72ddbf07aeb6e0023d4c88110b902d4081081c895f375e"} {"level":"info","ts":"2026-07-15T13:07:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f618878a72d79d0c909d856af9efa8399cb59275c3e68a4dd0ae4a294663956"} {"level":"info","ts":"2026-07-15T13:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50a70274add8c72709f5e526d6dadf11faa04743aff7676119ca0376ff31c84c"} {"level":"info","ts":"2026-07-15T13:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ded946b5cd03b8bfc1b8b0f01bc199ef0beae090e75d1b61042ee3b285f9ef"} {"level":"info","ts":"2026-07-15T13:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017b971a8984230179d5f2ae05240b12183cfe6cbe0e5d294333084c34b3c58a"} {"level":"info","ts":"2026-07-15T13:07:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d4dceae548d8affb6356123353425ce8087ebd73889dacc689440f19799a69c"}