--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"error","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b"} {"level":"error","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5"} {"level":"info","ts":"2026-07-15T21:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"error","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf"} {"level":"error","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6"} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:32:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"info","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:32:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"} {"level":"info","ts":"2026-07-15T21:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"info","ts":"2026-07-15T21:32:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151130,"nanos":74052317},"http":{"id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc66a83a-3e2d-4fbc-887f-780f296a2fd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57512","PortSpecifier":{"PortValue":57512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57512","PortSpecifier":{"PortValue":57512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151130,"nanos":138656942},"http":{"id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba4b980a-752c-4f4e-95c0-3c79e7e98f75","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56334","PortSpecifier":{"PortValue":56334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","method":"GET","path":"/maas-api/v1/api-keys/8e457aa8-f9b1-4ac2-87a0-f8e9bf89688c","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56334","PortSpecifier":{"PortValue":56334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151130,"nanos":203305762},"http":{"id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","method":"GET","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8e457aa8-f9b1-4ac2-87a0-f8e9bf89688c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/8e457aa8-f9b1-4ac2-87a0-f8e9bf89688c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9b5f34-dc27-46a6-aeeb-3e3cf949b2c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e057fffb-3f75-417f-96f5-61de6e2c368f","method":"GET","path":"/maas-api/v1/api-keys/f9c3f798-06f1-4e08-b903-464c20767d1a","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57524","PortSpecifier":{"PortValue":57524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151130,"nanos":241959515},"http":{"id":"e057fffb-3f75-417f-96f5-61de6e2c368f","method":"GET","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f9c3f798-06f1-4e08-b903-464c20767d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f9c3f798-06f1-4e08-b903-464c20767d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e057fffb-3f75-417f-96f5-61de6e2c368f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41464","PortSpecifier":{"PortValue":41464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbf36131-b638-4076-95f5-3ca2fe79925f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41464","PortSpecifier":{"PortValue":41464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151147,"nanos":586592498},"http":{"id":"fbf36131-b638-4076-95f5-3ca2fe79925f","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbf36131-b638-4076-95f5-3ca2fe79925f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33362","PortSpecifier":{"PortValue":33362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33362","PortSpecifier":{"PortValue":33362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151147,"nanos":626122587},"http":{"id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f6f9300-978e-4c3e-a48a-d9de531a7fc8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41474","PortSpecifier":{"PortValue":41474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16e5af7d-a711-461e-94ac-b6766c69d68d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41474","PortSpecifier":{"PortValue":41474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151147,"nanos":668874481},"http":{"id":"16e5af7d-a711-461e-94ac-b6766c69d68d","method":"GET","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MYQiUfWFR19qhOyE_l0zXF78WugwgLQovbHFewGGVd2NsDrg6OvC5W66wOSr"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MYQiUfWFR19qhOyE_l0zXF78WugwgLQovbHFewGGVd2NsDrg6OvC5W66wOSr\"}"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f01c3e1b-a245-489b-9912-fb94863ce702","keyName":"e2e-auth-iso-a-6c71cb","subscription":"e2e-auth-iso-896ebd","tenant":"e2e-shared-a-677131","userId":"f01c3e1b-a245-489b-9912-fb94863ce702","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-896ebd"} {"level":"info","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16e5af7d-a711-461e-94ac-b6766c69d68d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42206","PortSpecifier":{"PortValue":42206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae91cca-cd5d-413d-839f-0b328a91700d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42206","PortSpecifier":{"PortValue":42206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151164,"nanos":978387806},"http":{"id":"fae91cca-cd5d-413d-839f-0b328a91700d","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae91cca-cd5d-413d-839f-0b328a91700d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42358","PortSpecifier":{"PortValue":42358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42358","PortSpecifier":{"PortValue":42358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151165,"nanos":18373960},"http":{"id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08f5d5e1-453a-4c40-b230-dc8b18d9f9e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42360","PortSpecifier":{"PortValue":42360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e015db33-8813-41d0-9588-9bf6b4a6c763","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42360","PortSpecifier":{"PortValue":42360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151165,"nanos":57576482},"http":{"id":"e015db33-8813-41d0-9588-9bf6b4a6c763","method":"GET","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FkYScOFlQ7DsYBCM_myI7DZpP5yaY6qoqFQSLl1dHFveOQ3x05dk1X7uiVze"} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FkYScOFlQ7DsYBCM_myI7DZpP5yaY6qoqFQSLl1dHFveOQ3x05dk1X7uiVze\"}"} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-15T21:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e015db33-8813-41d0-9588-9bf6b4a6c763","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50782","PortSpecifier":{"PortValue":50782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50782","PortSpecifier":{"PortValue":50782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151182,"nanos":345365760},"http":{"id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a55dd452-e7e7-499e-9b5e-6b254c5aa391","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41568","PortSpecifier":{"PortValue":41568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41568","PortSpecifier":{"PortValue":41568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151182,"nanos":393650171},"http":{"id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"837ab811-5fe6-4a1d-98b4-2e285c4e4300","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50796","PortSpecifier":{"PortValue":50796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50796","PortSpecifier":{"PortValue":50796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151182,"nanos":437707766},"http":{"id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2b57d7f-04ad-4161-a13f-d3b957e61ac1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41584","PortSpecifier":{"PortValue":41584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151182,"nanos":484592887},"http":{"id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"517c0078-c863-4a29-8b0c-0c434db7e0d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42958","PortSpecifier":{"PortValue":42958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42958","PortSpecifier":{"PortValue":42958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151201,"nanos":903056683},"http":{"id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6303c0d-8110-42ed-ab73-5f97ea7d46ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151201,"nanos":942789238},"http":{"id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a93f3194-5198-478a-a82e-a3f58ff0afcb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46520","PortSpecifier":{"PortValue":46520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","method":"GET","path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46520","PortSpecifier":{"PortValue":46520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151201,"nanos":982727385},"http":{"id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","method":"GET","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a4a2356-4c3d-4162-9b40-697705a0cefe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42964","PortSpecifier":{"PortValue":42964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eab597e4-a038-4368-92b6-6d33627b5bf9","method":"GET","path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42964","PortSpecifier":{"PortValue":42964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151202,"nanos":16649852},"http":{"id":"eab597e4-a038-4368-92b6-6d33627b5bf9","method":"GET","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2b18db18-6e8e-43ec-8efd-147efcaa9fd0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eab597e4-a038-4368-92b6-6d33627b5bf9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53798","PortSpecifier":{"PortValue":53798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53798","PortSpecifier":{"PortValue":53798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151219,"nanos":322198437},"http":{"id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4124133e-8a0b-4e27-9ac7-90e1cddd1f8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c669011-4963-42a2-9275-79f110d08cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51132","PortSpecifier":{"PortValue":51132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c669011-4963-42a2-9275-79f110d08cd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c669011-4963-42a2-9275-79f110d08cd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51132","PortSpecifier":{"PortValue":51132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151219,"nanos":362330508},"http":{"id":"4c669011-4963-42a2-9275-79f110d08cd8","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c669011-4963-42a2-9275-79f110d08cd8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c669011-4963-42a2-9275-79f110d08cd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/auth-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c669011-4963-42a2-9275-79f110d08cd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c669011-4963-42a2-9275-79f110d08cd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c669011-4963-42a2-9275-79f110d08cd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53804","PortSpecifier":{"PortValue":53804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d231141a-93d4-4364-8218-01a07fb61bb9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53804","PortSpecifier":{"PortValue":53804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151219,"nanos":402278703},"http":{"id":"d231141a-93d4-4364-8218-01a07fb61bb9","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8CBTijIbksAK2M9i_L94eOvukSvQ5HxOmeNmZ3qeyLx8ves54R62Cnf4hd5U"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8CBTijIbksAK2M9i_L94eOvukSvQ5HxOmeNmZ3qeyLx8ves54R62Cnf4hd5U\"}"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d21c819b-8a41-4203-a3ad-d5fc22106325","keyName":"e2e-auth-iso-a-ff74b8","subscription":"e2e-auth-iso-e5c6b4","tenant":"e2e-shared-a-677131","userId":"d21c819b-8a41-4203-a3ad-d5fc22106325","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/auth-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e5c6b4"} {"level":"info","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:33:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d231141a-93d4-4364-8218-01a07fb61bb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aba2227db4fc5472d5f7584bcc0ac1e1311d27a7990ff7ef66eede91efd36f8f"} {"level":"info","ts":"2026-07-15T21:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2e9e17d8bc48fcb71f9201b440b76c28acdad232b572393f828cff3d7cf74de"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3c0ee64ea9d962462a813bc1820e455d1941488362b9ba3e97ca905d4952546"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac528b98a09e6c3139e69d52f17ee331e8d297da550a700670285f6e8d4406b"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02ed33d920f2f3bdc5b2d5f52ac27e6f64886d751c1f029cbd9297c64f9108ab"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd36233315aa34b3bd4cfd7866163a4d3edf48cf32bd4f978699e55297535ec5"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d91148da2610d9dacac7ae8856a2022b44e09c5f9733424cca5cbdcbbcd1d83"} {"level":"info","ts":"2026-07-15T21:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66894e38dfe04cc0a977eb44960f43fa88cbf33622f1ff5ff6e97271b71d7e70"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22a53f31a4aa0ae167e3ac800383e3382fa2bba79e943759729570f08ade6dcc"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0d5a2ea845836bc5e3ece29e491ddd726b4ce2f86b799eef54143cd80fdb965"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd376a63152255db99ce59669cf1f0ab7813851613f88d6cc29e3285ae97787b"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74df83b0eba0203cb02d929540512e6701538695be4ee4d466b2c9c0914524ca"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70cc1dd4b6113bfe3872755a0e236e81ca3f9411a6d93c4fc618df3cb9ffe7a6"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777eb8e64e5c2384cbb6887ee67548dd663aeefb0669c4f828dbf04c1fce9a26"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7266d17d246923fe2316d60a9369ab957e224f0f21d88621becb9f588449e27c"} {"level":"info","ts":"2026-07-15T21:33:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9076ec39eba19899636ce9b1800c5864326f7585d532130f9093ec7ddbe51cf"} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"error","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"error","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"error","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:33:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:33:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"error","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:34:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"info","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"debug","ts":"2026-07-15T21:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58442","PortSpecifier":{"PortValue":58442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151308,"nanos":568942058},"http":{"id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/sub-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c77e8f35-8b3c-43b0-81e0-bf4c27b8757f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47242","PortSpecifier":{"PortValue":47242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47242","PortSpecifier":{"PortValue":47242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151308,"nanos":618733527},"http":{"id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/sub-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21565ab5-39b5-4504-9dfe-43c3bf1d21d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58450","PortSpecifier":{"PortValue":58450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58450","PortSpecifier":{"PortValue":58450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151308,"nanos":660962773},"http":{"id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","method":"GET","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YXVeZIlB3w6CU1Nt_kmy3zkUaOWouoihUsqv1nRCMFq94RkOwi2jV7JVcRcC"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YXVeZIlB3w6CU1Nt_kmy3zkUaOWouoihUsqv1nRCMFq94RkOwi2jV7JVcRcC\"}"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72db5311-5a83-4eb8-8585-eb30328b4986","keyName":"e2e-sub-iso-8a4234","subscription":"e2e-a-only-d65a71","tenant":"e2e-shared-a-677131","userId":"72db5311-5a83-4eb8-8585-eb30328b4986","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/sub-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d65a71"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d0ffffc-78d7-4dd0-889b-8e2c8991ea56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151308,"nanos":703793629},"http":{"id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","method":"GET","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MwgJiGgss01A0jC5_CZUBStym6W4hyf39p1ucOgbJTvUx4zDeIeiykUR6TLS"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MwgJiGgss01A0jC5_CZUBStym6W4hyf39p1ucOgbJTvUx4zDeIeiykUR6TLS\"}"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d04f8e61-2d67-47b7-9b13-aa4ae406403e","keyName":"e2e-sub-iso-775fd1","subscription":"e2e-b-only-d65a71","tenant":"e2e-shared-b-266bf8","userId":"d04f8e61-2d67-47b7-9b13-aa4ae406403e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/sub-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d65a71"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7c69cd2-2543-47eb-9c02-c4e8cc75aeab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a88ca70-2e74-445e-8948-9cd17070bf15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151327,"nanos":603149949},"http":{"id":"9a88ca70-2e74-445e-8948-9cd17070bf15","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/sub-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a88ca70-2e74-445e-8948-9cd17070bf15","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48162","PortSpecifier":{"PortValue":48162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48162","PortSpecifier":{"PortValue":48162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151327,"nanos":648186821},"http":{"id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/sub-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c70c3e3f-fde7-4b64-9b50-e22d6702912b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46140","PortSpecifier":{"PortValue":46140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"741367a2-6969-4f3f-bdce-2bfa657742f8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46140","PortSpecifier":{"PortValue":46140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151327,"nanos":688740394},"http":{"id":"741367a2-6969-4f3f-bdce-2bfa657742f8","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GkAdikviwvNkPzN4_I4UpHpBOOrt8XgooMTSMV4AlaqGCB9jlfQeIg9ehlDq"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GkAdikviwvNkPzN4_I4UpHpBOOrt8XgooMTSMV4AlaqGCB9jlfQeIg9ehlDq\"}"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a77f1fc-4fd1-41fc-b77e-0c1b602ef03f","keyName":"e2e-sub-iso-16a3d0","subscription":"e2e-shared-sub-3315d3","tenant":"e2e-shared-a-677131","userId":"1a77f1fc-4fd1-41fc-b77e-0c1b602ef03f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/sub-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3315d3"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"741367a2-6969-4f3f-bdce-2bfa657742f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48176","PortSpecifier":{"PortValue":48176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48176","PortSpecifier":{"PortValue":48176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151327,"nanos":717794209},"http":{"id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZTL03lbY4htKQR6_B0XztADNTqa5EeSwfsdtHlav4ugJS9e1EL2xW5IMztL"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZTL03lbY4htKQR6_B0XztADNTqa5EeSwfsdtHlav4ugJS9e1EL2xW5IMztL\"}"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"253d2ade-ba88-4203-a8b8-d13717e08768","keyName":"e2e-sub-iso-65f2e9","subscription":"e2e-shared-sub-3315d3","tenant":"e2e-shared-b-266bf8","userId":"253d2ade-ba88-4203-a8b8-d13717e08768","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/sub-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3315d3"} {"level":"info","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:35:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd3cbdd2-b163-4a31-a141-475c5e0eee7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:35:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0172e40cceed21c0462e9afb9b378a3373efab05e03ac343576b1d96af67d1c"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93afe26767a0b7232fa063f1ee36acd953e745eba64325450feee4e5db65dae7"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f18fd4892425893a4908793603c3510a0d6152a3508a5eb0c4567a3f26bff6bc"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a468b426e8b57dd5ea5e4bdbcfa7482f0a5055ea4854e255654aa4effe1da4ad"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8b271807578585a94e250ce1dc58867358527fe89bf1ef71a524e195f7e03a1"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9a28428be4c5de791644cb25fc81a0adda7a9f27c90915d2fa1714bf988860f"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b8831ca17852a13f4f0c17fdffecc6599e1071ea12d1f467ddcd7847122e2ad"} {"level":"info","ts":"2026-07-15T21:35:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41756b83ff8e7b9f66b605ccb6fdf6f10dbf3ca09a98cae4880296519081a02"} {"level":"info","ts":"2026-07-15T21:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2578e86b3c0173238409332d3d81140bd14f29a67ef6fa07c29db738987800d3"} {"level":"info","ts":"2026-07-15T21:35:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed18d68fdb7a08d9a52fc7bd8e6291e7eff7f72f20b0038430e10f5cfc6e57eb"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08cd62b1dcb10a6b3f4c180c4ea5541a0ca1160a3cb6573461dbe332597df899"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c757e1ff5121346d1e2fde420bd142e7916191ed564bf6bb53f5fc14b0e1436"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbde22f4513113f43e69df9ef5699af6a5aa9ef330d6a42e3920ede4cb948904"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ecff9fd47baee928854d11e4fd73390137a6241afb90fbcdbcfda59b160d98"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7722258de1121618e3a51bfb52e9e621038c34d9b05643401f35f083b5e25ae0"} {"level":"info","ts":"2026-07-15T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6109c3cf1a8333053d61835777f4eca840620c9942bcb4285d0bbb232511cec6"} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"error","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:35:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"error","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:35:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a"} {"level":"debug","ts":"2026-07-15T21:36:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a"} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T21:36:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"debug","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed"} {"level":"info","ts":"2026-07-15T21:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45214","PortSpecifier":{"PortValue":45214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45214","PortSpecifier":{"PortValue":45214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151398,"nanos":725159480},"http":{"id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e8963a-b028-4cf2-9e12-71116b52bba7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49400","PortSpecifier":{"PortValue":49400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49400","PortSpecifier":{"PortValue":49400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151398,"nanos":769986141},"http":{"id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b7ebcf5-6798-45e1-adc9-2a78f298d854","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45230","PortSpecifier":{"PortValue":45230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45230","PortSpecifier":{"PortValue":45230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151398,"nanos":812250035},"http":{"id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy\"}"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","subscription":"e2e-rate-iso-a-21cdc2","tenant":"e2e-shared-a-677131","userId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-21cdc2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21cdc2"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","selected_subscription":"e2e-rate-iso-a-21cdc2","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-21cdc2@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11343d62-c8a9-40ee-bdf6-7288b0701e72","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45232","PortSpecifier":{"PortValue":45232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45232","PortSpecifier":{"PortValue":45232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151399,"nanos":874556953},"http":{"id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy\"}"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","subscription":"e2e-rate-iso-a-21cdc2","tenant":"e2e-shared-a-677131","userId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-21cdc2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21cdc2"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","selected_subscription":"e2e-rate-iso-a-21cdc2","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-21cdc2@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcb91e05-081e-4aa4-bda2-b08ba81ade97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45244","PortSpecifier":{"PortValue":45244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45244","PortSpecifier":{"PortValue":45244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151400,"nanos":915427775},"http":{"id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SLmOGHpyanuomnQn_mljM7iwvbApJmgzVUXmxC7YpJUr2HdCnLxMIPkH3nDy\"}"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","subscription":"e2e-rate-iso-a-21cdc2","tenant":"e2e-shared-a-677131","userId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-21cdc2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-21cdc2"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"80d6d103-7e41-437d-8a4d-cc4337ea9ee2","keyName":"e2e-rate-a-21cdc2","selected_subscription":"e2e-rate-iso-a-21cdc2","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-21cdc2@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-21cdc2","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ff6b7ec-cd75-4d85-b74d-f1e1cc8766ba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c990eb44-6942-4704-8be9-3ad78c821947","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51538","PortSpecifier":{"PortValue":51538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c990eb44-6942-4704-8be9-3ad78c821947","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c990eb44-6942-4704-8be9-3ad78c821947","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51538","PortSpecifier":{"PortValue":51538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151414,"nanos":838512015},"http":{"id":"c990eb44-6942-4704-8be9-3ad78c821947","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c990eb44-6942-4704-8be9-3ad78c821947","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c990eb44-6942-4704-8be9-3ad78c821947","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c990eb44-6942-4704-8be9-3ad78c821947","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c990eb44-6942-4704-8be9-3ad78c821947","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c990eb44-6942-4704-8be9-3ad78c821947","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54462","PortSpecifier":{"PortValue":54462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54462","PortSpecifier":{"PortValue":54462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151414,"nanos":879985103},"http":{"id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"]}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/57ad02118720"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=37190a6f-fb30-462e-8bdd-e4256d6d79fb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"601d9cf4-3632-4ea0-b0a1-436a004df6fc","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7ef893b-1c3b-41f6-8a06-43bb7ab10c23","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51544","PortSpecifier":{"PortValue":51544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151414,"nanos":919503559},"http":{"id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK\"}"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","subscription":"e2e-rate-iso-a-1a8a61","tenant":"e2e-shared-a-677131","userId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-1a8a61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a8a61"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","selected_subscription":"e2e-rate-iso-a-1a8a61","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-1a8a61@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5aaf5b4-5840-43b2-b30c-ae66d889f8a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51554","PortSpecifier":{"PortValue":51554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51554","PortSpecifier":{"PortValue":51554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151415,"nanos":961450399},"http":{"id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK\"}"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","subscription":"e2e-rate-iso-a-1a8a61","tenant":"e2e-shared-a-677131","userId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-1a8a61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a8a61"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","selected_subscription":"e2e-rate-iso-a-1a8a61","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-1a8a61@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996c6c8d-a89d-40d4-bbfa-b000aabbeed7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51562","PortSpecifier":{"PortValue":51562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a12063e8-e20e-4e3b-b1b3-48795d268971","method":"POST","path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions","host":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51562","PortSpecifier":{"PortValue":51562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151416,"nanos":997785199},"http":{"id":"a12063e8-e20e-4e3b-b1b3-48795d268971","method":"POST","headers":{":authority":"e2e-shared-a-677131.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-677131/rate-test-model-677131/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK"} {"level":"debug","ts":"2026-07-15T21:36:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ARmfWsGxO8SJ04Jp_cMP6oddlUG9975dNvtU1vlTk1gl6qGBDqE2Nd9yN5XK\"}"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","subscription":"e2e-rate-iso-a-1a8a61","tenant":"e2e-shared-a-677131","userId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\",\"requestedSubscription\":\"e2e-rate-iso-a-1a8a61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-677131.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-677131/rate-test-model-677131\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-677131/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a8a61"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"97c3c510-e160-4b24-aa03-ddd301e81ab8","keyName":"e2e-rate-a-1a8a61","selected_subscription":"e2e-rate-iso-a-1a8a61","selected_subscription_key":"ai-tenant-e2e-shared-a-677131/e2e-rate-iso-a-1a8a61@ai-tenant-e2e-shared-a-677131/rate-test-model-677131","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-677131","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a8a61","namespace":"ai-tenant-e2e-shared-a-677131","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a12063e8-e20e-4e3b-b1b3-48795d268971","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ada034-8001-4090-8437-c779bad30535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54476","PortSpecifier":{"PortValue":54476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33ada034-8001-4090-8437-c779bad30535","method":"POST","path":"/ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8/v1/completions","host":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ada034-8001-4090-8437-c779bad30535","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54476","PortSpecifier":{"PortValue":54476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784151417,"nanos":35019546},"http":{"id":"33ada034-8001-4090-8437-c779bad30535","method":"POST","headers":{":authority":"e2e-shared-b-266bf8.apps.6b1b7810-bc88-433f-8c79-57ad02118720.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-avd9l64DU9STVoMJ_gvUf1g0rYgcAGrZP2HCxoor8AvjkpoI19dT0cGgR2zk"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33ada034-8001-4090-8437-c779bad30535","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-avd9l64DU9STVoMJ_gvUf1g0rYgcAGrZP2HCxoor8AvjkpoI19dT0cGgR2zk\"}"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2f403834-1d02-4671-944d-340b89d84cd2","keyName":"e2e-rate-b-1a8a61","subscription":"e2e-rate-iso-b-1a8a61","tenant":"e2e-shared-b-266bf8","userId":"2f403834-1d02-4671-944d-340b89d84cd2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33ada034-8001-4090-8437-c779bad30535","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8\",\"requestedSubscription\":\"e2e-rate-iso-b-1a8a61\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-266bf8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-266bf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a8a61","namespace":"ai-tenant-e2e-shared-b-266bf8","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33ada034-8001-4090-8437-c779bad30535","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-266bf8/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1a8a61"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ada034-8001-4090-8437-c779bad30535","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2f403834-1d02-4671-944d-340b89d84cd2","keyName":"e2e-rate-b-1a8a61","selected_subscription":"e2e-rate-iso-b-1a8a61","selected_subscription_key":"ai-tenant-e2e-shared-b-266bf8/e2e-rate-iso-b-1a8a61@ai-tenant-e2e-shared-b-266bf8/rate-test-model-266bf8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-266bf8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a8a61","namespace":"ai-tenant-e2e-shared-b-266bf8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ada034-8001-4090-8437-c779bad30535","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ada034-8001-4090-8437-c779bad30535","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T21:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd5b32666833546b28bbc185181f07de0d01d891b7866dce5bf349e44a0995dc"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92668a4271c8dadb381d2e2a213337e285df71b24d18203bba5a9c2b1a54502a"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8508d8ea7df096e54df25b6dd88eabdf646f10e3401d054658b3e3f7797f8771"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a78e33d524e4be016586d7d67c6f85d290e8513a9fcb75175b86cfa959af1ca1"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbc3ff1d52c3c3ec6a54f9f80d9427cda8ec1c5815fd8a27b766ef29c9781c41"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ec068e7d4ec872af0e22045e6badd5461e44a558f792fa27c656d99a11e83c0"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/197e1f70115210457912ce85eae286befd4e12d6c15d0697ef524d7703e8b567"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/983f5fc3602ee9afc7a846af0bee5491b38e1cb021b994f24ad9be43c6824e26"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/415318047a12a06c8f2a2262d32870df83f37a3abf655ed2e430c5d98f99cff5"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3776d9f55f5c5780822206eec7efb6dbb198d0693703ea35a71fd24ef5223e84"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c048c39f00e471bb08bd1e2c1bb90551f15a896fe789fa7d044343fca96b8248"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16ffe9f23c600501b8562b681739b6d344c4d009e9dcdcc4f6ab919b76e93ed"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b6d485d8d576317f3eed1f842cb2f40b477495ae6dd64f16c9aa31fd4df68b3"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ebaedb405f254cd002fa738c512d2276da0b5440b428079739be26ce520175e"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0a2ea1f22624116d43627e3c48b1ccb5865a7ce1b6fcbd7c255b22bc2feb164"} {"level":"info","ts":"2026-07-15T21:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61a67868dda9b1fe155211e316552990a94d01dc45e431f19284c69f1ded01fc"} {"level":"info","ts":"2026-07-15T21:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aff9f5a4341c5a8b5438fafb7c2d81f33c2ec833255fb24b00445a7b6efa9fea"} {"level":"info","ts":"2026-07-15T21:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d51d1a762b74d5088dd40bf0ebba08cb9063e396caa1bdae81b77a701ebb9be9"} {"level":"info","ts":"2026-07-15T21:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86e3adbaff4e86f4742c8780c0da7a2294885947a312c423cd5549ecaa4c7541"} {"level":"info","ts":"2026-07-15T21:37:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/091f7d74db84a7cbd7bf00bba750629c75410c93a12f3234d938229782cfbc2c"} {"level":"info","ts":"2026-07-15T21:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f7c8275edf322b1115bd8f985d9d2eaf5393c085e04669e635c024fbb48b07e"} {"level":"info","ts":"2026-07-15T21:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2edb4bf9af191695d00943c5b45b16613eccec8b8b3d275231bc8a6d86ee6633"} {"level":"info","ts":"2026-07-15T21:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f34d44200da5998d67061e0cb3e6de5ce46c993bd0533ccf244349d4901dc06"} {"level":"info","ts":"2026-07-15T21:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc10719242346fbe7d5b4fe0b16172e9e187166a558d69f0c20315ba5d1ff13"}