--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36480","PortSpecifier":{"PortValue":36480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab36c333-3f24-43b5-b949-536299b20fc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36480","PortSpecifier":{"PortValue":36480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566492,"nanos":278095994},"http":{"id":"ab36c333-3f24-43b5-b949-536299b20fc0","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab36c333-3f24-43b5-b949-536299b20fc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d397e46-1138-4084-8831-e79ad073ec09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49040","PortSpecifier":{"PortValue":49040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d397e46-1138-4084-8831-e79ad073ec09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d397e46-1138-4084-8831-e79ad073ec09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49040","PortSpecifier":{"PortValue":49040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566492,"nanos":310147096},"http":{"id":"8d397e46-1138-4084-8831-e79ad073ec09","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d397e46-1138-4084-8831-e79ad073ec09","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d397e46-1138-4084-8831-e79ad073ec09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d397e46-1138-4084-8831-e79ad073ec09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d397e46-1138-4084-8831-e79ad073ec09","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d397e46-1138-4084-8831-e79ad073ec09","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58094","PortSpecifier":{"PortValue":58094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd5879fe-e5cf-4839-a92a-b542aa164939","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58094","PortSpecifier":{"PortValue":58094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566492,"nanos":348404924},"http":{"id":"cd5879fe-e5cf-4839-a92a-b542aa164939","method":"GET","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LOOr0Y0TLIWk4YWc_VhXONoWQLS6e9c6ryfF8tbmvgxQCKF1dhQMvE1fuTTn"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LOOr0Y0TLIWk4YWc_VhXONoWQLS6e9c6ryfF8tbmvgxQCKF1dhQMvE1fuTTn\"}"} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-20T16:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd5879fe-e5cf-4839-a92a-b542aa164939","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-20T16:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39412","PortSpecifier":{"PortValue":39412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39412","PortSpecifier":{"PortValue":39412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566511,"nanos":497097633},"http":{"id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35c1d8b4-4552-4ff3-b6c3-1f65fdb6e065","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42960","PortSpecifier":{"PortValue":42960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566511,"nanos":533610233},"http":{"id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70c8b524-0102-4f04-9fd2-fb64f63717ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39418","PortSpecifier":{"PortValue":39418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39418","PortSpecifier":{"PortValue":39418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566511,"nanos":569650525},"http":{"id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3119c3d4-87d5-43b5-b998-74d24e7937c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:42972","PortSpecifier":{"PortValue":42972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566511,"nanos":604761587},"http":{"id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a7d21e3-3f4c-44d4-bf60-8bb25b07d686","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"error","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"error","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34172","PortSpecifier":{"PortValue":34172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34172","PortSpecifier":{"PortValue":34172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566533,"nanos":770355738},"http":{"id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c52872c6-ce56-47fa-8ada-d7f9169e1ba2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51972","PortSpecifier":{"PortValue":51972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d136fb4-52dc-4676-af65-f428bef2230d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51972","PortSpecifier":{"PortValue":51972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566533,"nanos":805690410},"http":{"id":"2d136fb4-52dc-4676-af65-f428bef2230d","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d136fb4-52dc-4676-af65-f428bef2230d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","method":"GET","path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51982","PortSpecifier":{"PortValue":51982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566533,"nanos":841534243},"http":{"id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","method":"GET","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9637c6a4-cd51-46ad-a1a8-8b9898509ac3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34174","PortSpecifier":{"PortValue":34174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","method":"GET","path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34174","PortSpecifier":{"PortValue":34174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566533,"nanos":870591707},"http":{"id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","method":"GET","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1e901e64-d007-4868-94c0-3825f022d6e7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fff5d2c1-6a1d-43f7-a0b6-44096e498da8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"error","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"error","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"debug","ts":"2026-07-20T16:55:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"error","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"error","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:55:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"debug","ts":"2026-07-20T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:55:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:55:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55582","PortSpecifier":{"PortValue":55582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"325138b3-1d1d-4d73-b3ce-fa74be939341","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55582","PortSpecifier":{"PortValue":55582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566553,"nanos":26414511},"http":{"id":"325138b3-1d1d-4d73-b3ce-fa74be939341","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"325138b3-1d1d-4d73-b3ce-fa74be939341","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40838","PortSpecifier":{"PortValue":40838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0807a72f-22d7-42f0-ac45-323235b4f089","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40838","PortSpecifier":{"PortValue":40838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566553,"nanos":62191172},"http":{"id":"0807a72f-22d7-42f0-ac45-323235b4f089","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/auth-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0807a72f-22d7-42f0-ac45-323235b4f089","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55586","PortSpecifier":{"PortValue":55586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"801224bc-6799-4103-980a-fc9fc7f41f20","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55586","PortSpecifier":{"PortValue":55586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566553,"nanos":105654244},"http":{"id":"801224bc-6799-4103-980a-fc9fc7f41f20","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UmZAjkoqvYFezPZ_2zuWo7jt0zSMsQ0ZvGmGl18zKn9Mulf0lOdmUnTrO9u"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UmZAjkoqvYFezPZ_2zuWo7jt0zSMsQ0ZvGmGl18zKn9Mulf0lOdmUnTrO9u\"}"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"520e32c7-fcdc-4e1d-9094-89202a505587","keyName":"e2e-auth-iso-a-7900b2","subscription":"e2e-auth-iso-239f45","tenant":"e2e-shared-a-42e123","userId":"520e32c7-fcdc-4e1d-9094-89202a505587","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/auth-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-239f45"} {"level":"info","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:55:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"801224bc-6799-4103-980a-fc9fc7f41f20","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddd95c2431bed153f478edb629b96ae69a173da34e436755c6ef4c2707cbdd1d"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/925f67e2885bc67c9bd33294d44835a4f9f1151ebcb44bf751baf48691e88cb7"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2222c032759ea005816527f02b1341c91f33331ea5ea4d9dcb33d0938a3d79ee"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1ab6e9f53b0c606f10e9e0f41cf7e8617363f7dbb898425afd93a612e4a26ca"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b9c2b8d4a47ef5f456fca4323b2e1ec8bd00feb3939e180453255463b10e1c5"} {"level":"info","ts":"2026-07-20T16:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac5c1643d1ff6a9fe48c9f9fcc1b881bb17162bc1036caf40f846aaed8b2c98"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75592b5bd6d673648e6f8aa3c056094d2b447aa50555493aec2a6162fd8c848e"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3110626b9ede933a3ae72aff53025b33f734f4bebbd8c23871a36b0e06c7968"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e0a5b75f10e8c4dc6d371ca906d9bf86a3b94336fd510d486af41c81bd0008c"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58ea490ec885c6e2df673df128e38e3b13b1fbd47637c54f667a0c5acaeccffa"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1bce2d5a759fc11f3bfd7c9a7a597bd4f85e98a4f5724cf29fe86d9fc88db08"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ece4865f1ff437caf3860e0ca0cef52a57c32bed841536f065f3525cfcd7320"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2aa8ced4e3ebd4a4087132dd1b31951b9a76faa378d1e366e2fa3e4464f8c0d4"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beffb2f536acb81caaa99f4d492b9908f5ec074e063eebd108cf6d32b43eb90e"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee8bcfa5161523f8464e97cba715ec107aac5d592311f2d2e7402843e122ffa"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53a2053bc76dde4b9add2d898158395f58dbad122a1b34f7a5a735bbb63a583a"} {"level":"info","ts":"2026-07-20T16:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"debug","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"} {"level":"info","ts":"2026-07-20T16:57:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:57:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:57:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7"} {"level":"info","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:57:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566634,"nanos":99174791},"http":{"id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/sub-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f694bb-a98e-4f4c-b5ea-d97b6646f330","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0746957-8113-4dfb-b010-3708b62cdf85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566634,"nanos":137989384},"http":{"id":"b0746957-8113-4dfb-b010-3708b62cdf85","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/sub-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0746957-8113-4dfb-b010-3708b62cdf85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41054","PortSpecifier":{"PortValue":41054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41054","PortSpecifier":{"PortValue":41054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566634,"nanos":174463162},"http":{"id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","method":"GET","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WObOuXXSWjPaUmYq_Zc5fr5hsOyeVPnswZkugmJqWs31mJ0yQhycPanxAnBh"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WObOuXXSWjPaUmYq_Zc5fr5hsOyeVPnswZkugmJqWs31mJ0yQhycPanxAnBh\"}"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"acfb231d-a40c-45ef-b519-77c3fe2086bb","keyName":"e2e-sub-iso-dbe7f1","subscription":"e2e-a-only-5fe8d0","tenant":"e2e-shared-a-42e123","userId":"acfb231d-a40c-45ef-b519-77c3fe2086bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/sub-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5fe8d0"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47a35ef3-aa68-4b1a-b4ae-5413d168f4da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7837abbc-4968-46b7-964b-39676e609d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7837abbc-4968-46b7-964b-39676e609d53","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7837abbc-4968-46b7-964b-39676e609d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33022","PortSpecifier":{"PortValue":33022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566634,"nanos":210480448},"http":{"id":"7837abbc-4968-46b7-964b-39676e609d53","method":"GET","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f8Ps1JQ9p76lpHxR_OE4JH5HINZaGa7uifBPw8JoxwTT0h8ICbvj1SWNlzg3"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f8Ps1JQ9p76lpHxR_OE4JH5HINZaGa7uifBPw8JoxwTT0h8ICbvj1SWNlzg3\"}"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4fe69ee-b3f6-40f9-b92b-3c1711e7623b","keyName":"e2e-sub-iso-d789cc","subscription":"e2e-b-only-5fe8d0","tenant":"e2e-shared-b-c5c3fb","userId":"d4fe69ee-b3f6-40f9-b92b-3c1711e7623b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7837abbc-4968-46b7-964b-39676e609d53","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/sub-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5fe8d0"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7837abbc-4968-46b7-964b-39676e609d53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7837abbc-4968-46b7-964b-39676e609d53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7837abbc-4968-46b7-964b-39676e609d53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de5bd401-c969-9a42-a915-b954917bef1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34074","PortSpecifier":{"PortValue":34074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de5bd401-c969-9a42-a915-b954917bef1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de5bd401-c969-9a42-a915-b954917bef1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34074","PortSpecifier":{"PortValue":34074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566648,"nanos":313748876},"http":{"id":"de5bd401-c969-9a42-a915-b954917bef1d","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de5bd401-c969-9a42-a915-b954917bef1d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de5bd401-c969-9a42-a915-b954917bef1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/sub-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de5bd401-c969-9a42-a915-b954917bef1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de5bd401-c969-9a42-a915-b954917bef1d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de5bd401-c969-9a42-a915-b954917bef1d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44944","PortSpecifier":{"PortValue":44944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44944","PortSpecifier":{"PortValue":44944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566648,"nanos":348010945},"http":{"id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/sub-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"006cf1d6-bfaa-4543-a8c5-9b580a51b4aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34084","PortSpecifier":{"PortValue":34084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3bb8858-c372-4148-81b7-ab05d952f10d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34084","PortSpecifier":{"PortValue":34084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566648,"nanos":380218523},"http":{"id":"f3bb8858-c372-4148-81b7-ab05d952f10d","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FZCwEQO7V8JCb7PU_LXn7V0GKFLjAzJxeOPWGs7pEZ7K0f9D00TpMALLJIb0"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FZCwEQO7V8JCb7PU_LXn7V0GKFLjAzJxeOPWGs7pEZ7K0f9D00TpMALLJIb0\"}"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8bee5c69-83cd-461c-abe3-b76b937363e9","keyName":"e2e-sub-iso-08178e","subscription":"e2e-shared-sub-88e6b1","tenant":"e2e-shared-a-42e123","userId":"8bee5c69-83cd-461c-abe3-b76b937363e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/sub-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-88e6b1"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3bb8858-c372-4148-81b7-ab05d952f10d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44950","PortSpecifier":{"PortValue":44950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52132bd9-f0f8-40b4-809b-e8a94312df50","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44950","PortSpecifier":{"PortValue":44950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566648,"nanos":407709948},"http":{"id":"52132bd9-f0f8-40b4-809b-e8a94312df50","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-YY75E3FNx3gIjLb4_ou3q71GJsyiTUr2pWr9p3poCAHoQPuMbvBsyxxHMSEF"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-YY75E3FNx3gIjLb4_ou3q71GJsyiTUr2pWr9p3poCAHoQPuMbvBsyxxHMSEF\"}"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59bca233-f3b4-473b-8164-1daa0b2aa647","keyName":"e2e-sub-iso-eccfbe","subscription":"e2e-shared-sub-88e6b1","tenant":"e2e-shared-b-c5c3fb","userId":"59bca233-f3b4-473b-8164-1daa0b2aa647","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/sub-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-88e6b1"} {"level":"info","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52132bd9-f0f8-40b4-809b-e8a94312df50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64eb522f80ee2dfbd2ee2f314d8b13a6872bb9f755aaaf5a7366ecaaad9daeeb"} {"level":"info","ts":"2026-07-20T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a331739a9f0a2f25a26ae662bc5bfb3579dbe99d0f2fc5544c5ab080d3ab45cf"} {"level":"info","ts":"2026-07-20T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:57:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb5d27f0b963f672f3812709f37d5de8e01f540bf1ba49f70e4901a0a36b3d32"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7e4dbf191669e232ab9565deee07115f58e2900932219c68c7b0339f2b89fbf"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e0315d43d6c22de1c375d3b2cad2270aa623b0ce23dc6a7bc21b9b9b77ed671"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19526a04423fbaa091b2ab7b469ccf83f899731dc62037d80594db84df80ab0e"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0633dfe499dc6a796161ba9e78f9fc1f57eb8ed38a13eff6934e8231dea866e6"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3838a77b0402b8e12ab421ea0569c5ca7b9fd5d64f5250343f4d6d524a816f4e"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493fa5978172cf04689b74e948978588063747d6ac2787995d1276872cb90195"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec1eec8c4f4aea114623c65ab14a81e7789aac61b97e332f0f2538c9e4838fe9"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a129396e9095056eff3eaf6308bfe84c4e3ff2a7b251d60e0d6bc18c1fb8aae7"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0ef20374efc15d573a58cff34fdd790ac0ec9dfa843dc74ff2ef75171790d1f"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef84f95b4362ac80b63c702dcdd1639241e29b122c17ed92160c2d519041652a"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43cd21f4e58714b250ed330b30055a3de701adcd3da9a7539a30b5535210a346"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b45058c0b43951c43f0ef91958992b7ddac5594280c548c98a5a4e95af29f4d"} {"level":"info","ts":"2026-07-20T16:57:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1be49e5e18990cd218c7037896a3c5c456bd393e83dd4f94a66077dda4cbf2f"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"} {"level":"error","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"error","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"error","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"} {"level":"error","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"} {"level":"info","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T16:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"} {"level":"error","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-20T16:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56718","PortSpecifier":{"PortValue":56718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":608634798},"http":{"id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"460191e8-ae0a-4cbe-bd21-d6f7e10e51bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43798","PortSpecifier":{"PortValue":43798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43798","PortSpecifier":{"PortValue":43798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":647573195},"http":{"id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43d066c-0f14-4ad9-808e-77192a8bd9e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56728","PortSpecifier":{"PortValue":56728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566713,"nanos":693059946},"http":{"id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdcd3bcc-2eca-4147-91a7-b054464ee895","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56740","PortSpecifier":{"PortValue":56740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56740","PortSpecifier":{"PortValue":56740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566714,"nanos":751273241},"http":{"id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a36d58-5738-4a09-b43c-84eb1f54c0ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56746","PortSpecifier":{"PortValue":56746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56746","PortSpecifier":{"PortValue":56746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566715,"nanos":787660864},"http":{"id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b90d06c0-dd5b-439c-a621-c19b65f92e2b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56748","PortSpecifier":{"PortValue":56748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50d7809c-5e78-48ca-8518-577ba6824600","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56748","PortSpecifier":{"PortValue":56748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566716,"nanos":825185562},"http":{"id":"50d7809c-5e78-48ca-8518-577ba6824600","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50d7809c-5e78-48ca-8518-577ba6824600","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50d7809c-5e78-48ca-8518-577ba6824600","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50d7809c-5e78-48ca-8518-577ba6824600","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50d7809c-5e78-48ca-8518-577ba6824600","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56756","PortSpecifier":{"PortValue":56756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566717,"nanos":870436292},"http":{"id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ab07929-53bb-4098-a918-f5fc8a74f1aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56764","PortSpecifier":{"PortValue":56764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca540e27-44e6-4f03-b592-dc95e3836527","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56764","PortSpecifier":{"PortValue":56764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566718,"nanos":904170674},"http":{"id":"ca540e27-44e6-4f03-b592-dc95e3836527","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca540e27-44e6-4f03-b592-dc95e3836527","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56772","PortSpecifier":{"PortValue":56772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56772","PortSpecifier":{"PortValue":56772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566719,"nanos":940510766},"http":{"id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kwZuWJQvv64Sx7MF_BuVqysZEa90K5TVFrHsupUVsbo0nttffWNL9Inh8UY5\"}"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","subscription":"e2e-rate-iso-a-e3d499","tenant":"e2e-shared-a-42e123","userId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-e3d499\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e3d499"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"30916ad3-8ad4-4844-9b17-c5474caf1a3a","keyName":"e2e-rate-a-e3d499","selected_subscription":"e2e-rate-iso-a-e3d499","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-e3d499@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e3d499","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b342ebd-b1eb-478b-8cb8-08bb06abd3b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58604","PortSpecifier":{"PortValue":58604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0554cc95-ed84-423c-8e49-e71d8573ec00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58604","PortSpecifier":{"PortValue":58604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":547075283},"http":{"id":"0554cc95-ed84-423c-8e49-e71d8573ec00","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0554cc95-ed84-423c-8e49-e71d8573ec00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51086","PortSpecifier":{"PortValue":51086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":583033076},"http":{"id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"]}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f8375e788fef"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=154b48c0-a705-4164-8dec-35fffa54d4a6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1abbd2f7-670c-4a0d-abab-b48aafe93bad","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ea5a0fb-ff1a-450f-845a-4ad80b8d6be1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58608","PortSpecifier":{"PortValue":58608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fe04807-fc63-4b11-91a2-56357ff482f0","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58608","PortSpecifier":{"PortValue":58608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566728,"nanos":619734154},"http":{"id":"3fe04807-fc63-4b11-91a2-56357ff482f0","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fe04807-fc63-4b11-91a2-56357ff482f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58624","PortSpecifier":{"PortValue":58624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c529d85e-ad07-4d95-8de7-634fcabbc732","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58624","PortSpecifier":{"PortValue":58624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566729,"nanos":656519964},"http":{"id":"c529d85e-ad07-4d95-8de7-634fcabbc732","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c529d85e-ad07-4d95-8de7-634fcabbc732","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58628","PortSpecifier":{"PortValue":58628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ed135be-5ec2-426c-93fb-4389d99809b8","method":"POST","path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions","host":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58628","PortSpecifier":{"PortValue":58628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566730,"nanos":688553443},"http":{"id":"6ed135be-5ec2-426c-93fb-4389d99809b8","method":"POST","headers":{":authority":"e2e-shared-a-42e123.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Cz0Ri7aBXNQwZiFf_3tV9mtKp8MnS66GlcCMALK7tz88pN3fLP3CPe1bBgWG\"}"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","subscription":"e2e-rate-iso-a-59d6a6","tenant":"e2e-shared-a-42e123","userId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\",\"requestedSubscription\":\"e2e-rate-iso-a-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-42e123.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-42e123/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-59d6a6"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5557ada7-ee9c-4fd4-acf8-ee21b2b74e4a","keyName":"e2e-rate-a-59d6a6","selected_subscription":"e2e-rate-iso-a-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-a-42e123/e2e-rate-iso-a-59d6a6@ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-42e123","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-59d6a6","namespace":"ai-tenant-e2e-shared-a-42e123","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-42e123/rate-test-model-42e123"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed135be-5ec2-426c-93fb-4389d99809b8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51098","PortSpecifier":{"PortValue":51098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","method":"POST","path":"/ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb/v1/completions","host":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51098","PortSpecifier":{"PortValue":51098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784566730,"nanos":719492691},"http":{"id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","method":"POST","headers":{":authority":"e2e-shared-b-c5c3fb.apps.5bd7edd2-ddcc-4b39-a3d0-f8375e788fef.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8cXqp4bFEW8MLX1d_rXK1DeFuzd8Xq3ueIqnuWpMsjHTwNeLqKY32voJFH9G"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8cXqp4bFEW8MLX1d_rXK1DeFuzd8Xq3ueIqnuWpMsjHTwNeLqKY32voJFH9G\"}"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28477ee7-bf98-4274-b5cd-a313eedbf982","keyName":"e2e-rate-b-59d6a6","subscription":"e2e-rate-iso-b-59d6a6","tenant":"e2e-shared-b-c5c3fb","userId":"28477ee7-bf98-4274-b5cd-a313eedbf982","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\",\"requestedSubscription\":\"e2e-rate-iso-b-59d6a6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c5c3fb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c5c3fb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-59d6a6","namespace":"ai-tenant-e2e-shared-b-c5c3fb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb"}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-c5c3fb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-59d6a6"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"28477ee7-bf98-4274-b5cd-a313eedbf982","keyName":"e2e-rate-b-59d6a6","selected_subscription":"e2e-rate-iso-b-59d6a6","selected_subscription_key":"ai-tenant-e2e-shared-b-c5c3fb/e2e-rate-iso-b-59d6a6@ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c5c3fb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-59d6a6","namespace":"ai-tenant-e2e-shared-b-c5c3fb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-c5c3fb/rate-test-model-c5c3fb"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-20T16:58:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4105675-b4ab-4dbe-b0e6-282ec010ef9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c195e0a402304e17697eb85760f9dd0179fb7dca69a2a426c37e352ad11e7a2"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29f8a11d24c2cad2756575a29de95dd1f2e909e4e73d87ae3497c2002242bc8a"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d464df84ef21e3cf50d05809cb3cc8259f9ddab002c9bdbe3dcfe1d80cc620fb"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9715c3c4d481c68c4ee93a640a829b3d68d464bb4b14b20d5912834af851f6a6"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6a4343600f93797c519cee66b1615acb8a979587af5bd817090f86f59958e7a"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27b4f41683b6cd894aa80199766cb5c29ff707c4d6a0a39b39b954a0541a9fb"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571ada7b762bfc245c557be1d105dce2d272ed5d3fb9c6f8ff3174a0dd88b459"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31466971ddb695ec934578a9761be1dbd7aef1022e1d6a60f2cbdb0bbbcbde48"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cf081b391f2f22f73356dc91963593c9ffe339d16e92442d3b657e3d16c2bb"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7501b753f8e1bdbc8b305f0afe51c887495062ab32abf1ee85fbd806272dfbc1"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be37f4f9c3d8e8a9f70c5d699a53bfec8408d22189285a9d2f4d64cfe8d050f0"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/351428a979a64425efc57e6c85a27f6a8a832ea955815a8e7c00e2e744f466cb"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74b4439c1f4422cb188a26208095f456cce0630132a148f8967286b060a69529"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14470fb7bc310862a668a9f9e427b0b2a79b181bdc1438ee8fb9b623134153dd"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af75b351969c71dccfeb7f2c6899f24ee6dd27facbde5b46700a77f510d92914"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/badcb31772bbf41c0ff410f9abf5414f5622cc26d8c58a61a8fdd7108dfc6521"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23509c7fae894af75d8a36952f576b504c571d86632fd6fc027618902736585f"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f4708f6634eab2f7e75786c99955098f6f2e53b1abd1482928915ee304d416"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93ded8e6b15d9c8a671802595aa238cbbf3b48ffd7daad885d76909b96ea068d"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f2a586ad8a9280fac1b54aedb02c02cc2936e454035b2cbd1418aff1d6dc335"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/562e3002d32589ba9b3e951ad0939716f6eca3020e3c703b425dca6fd7cede32"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bffcd022569629d1e561b1a9269af4d37598a546f164a362a2ca4ad57a574aa0"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413899ad7408d39fbdbb2cb9f421e9bb48093d09f228088ff9efd76e7c25ee92"} {"level":"info","ts":"2026-07-20T16:58:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a3aae5564e87199e9386f661609060b8ec255e44bd29dda9f048904cf6e5b9"}