--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/688727b60e143dfa3525464159134af71810cad04103a9aa4708979bc5ab5e60"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0"} {"level":"info","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:27:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"error","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:27:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53790","PortSpecifier":{"PortValue":53790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f480de99-ab81-4a46-a2da-0e900aa93013","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","object":"source:{address:{socket_address:{address:\"10.132.0.8:53790\" port_value:53790}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666437 nanos:472319436} http:{id:\"f480de99-ab81-4a46-a2da-0e900aa93013\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f480de99-ab81-4a46-a2da-0e900aa93013\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f480de99-ab81-4a46-a2da-0e900aa93013"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"f480de99-ab81-4a46-a2da-0e900aa93013","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":472319436,"seconds":1785666437}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53790},"address":"10.132.0.8:53790"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f480de99-ab81-4a46-a2da-0e900aa93013"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"f480de99-ab81-4a46-a2da-0e900aa93013","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":472319436,"seconds":1785666437},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:53790","port":53790}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/auth-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f480de99-ab81-4a46-a2da-0e900aa93013","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65908642-5f35-4d77-94e4-3132aab91a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60462","PortSpecifier":{"PortValue":60462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65908642-5f35-4d77-94e4-3132aab91a84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65908642-5f35-4d77-94e4-3132aab91a84","object":"source:{address:{socket_address:{address:\"10.132.0.8:60462\" port_value:60462}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666437 nanos:522037221} http:{id:\"65908642-5f35-4d77-94e4-3132aab91a84\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"65908642-5f35-4d77-94e4-3132aab91a84\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65908642-5f35-4d77-94e4-3132aab91a84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65908642-5f35-4d77-94e4-3132aab91a84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"65908642-5f35-4d77-94e4-3132aab91a84"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"65908642-5f35-4d77-94e4-3132aab91a84","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":522037221,"seconds":1785666437}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60462},"address":"10.132.0.8:60462"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"65908642-5f35-4d77-94e4-3132aab91a84"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"65908642-5f35-4d77-94e4-3132aab91a84","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":522037221,"seconds":1785666437},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:60462","port":60462}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/auth-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65908642-5f35-4d77-94e4-3132aab91a84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65908642-5f35-4d77-94e4-3132aab91a84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65908642-5f35-4d77-94e4-3132aab91a84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53796","PortSpecifier":{"PortValue":53796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","object":"source:{address:{socket_address:{address:\"10.132.0.8:53796\" port_value:53796}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666437 nanos:571974733} http:{id:\"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kBLKbWOcTfB8f5wE_eBEI89JiMcGmxclV50zEz1xa3l2q33GqlzXAVn0opkE"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f4d65f6a-e1e5-44d6-b6bb-f1f96440e7a6","keyName":"e2e-auth-iso-a-2d03f2","subscription":"e2e-auth-iso-ba8924","tenant":"e2e-shared-a-e9225c","userId":"f4d65f6a-e1e5-44d6-b6bb-f1f96440e7a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":571974733,"seconds":1785666437}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53796},"address":"10.132.0.8:53796"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":571974733,"seconds":1785666437},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:53796","port":53796}}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/auth-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ba8924"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0cf80f2-9cf8-4ba6-a85e-ce0160c133fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a044f6da4782f3b963954968fc6e2a251f9443f14fae7d13c5694734c53cc0a2"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/277aff20c6494289cd96c5238adf1116eb79c6f60dd933abb759a6760aa93cb0"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/688727b60e143dfa3525464159134af71810cad04103a9aa4708979bc5ab5e60"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d34bb748e27b365abdce2204848859829c7fc0a735c197f97d02c9bae9d5cc1a"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ac524385cb49cf396b29c0699b868b3fc4acaf9b9516f8a142de631cecc84e6"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/240aa3ca3222885ce1b36072ed4de6c73a9d00bc1862ddbb8c5101bb340468e4"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a12f7bfea9e882353e98d67106d2455b998569ea82798319dde785a0822db19c"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c5a247059c746e6c2c9a1f37cd59f549436b9203f510ca1eb1162daf1cfe0ef"} {"level":"info","ts":"2026-08-02T10:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053dac6ce5582959da951cfd73f3a019f2be4677cdbc3952ebd7a7feb3eaf8f0"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4480a8af38461b14da3ed90b8cafe8296913d57f89e12b91175a90c3e6f23f3"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aef5e03e41ab7ebf0c3b39c6c5dfdf6f96b3ec9847794011f1146f12b72b12e8"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ccc5ef9bf980c37b9dbe9b3b4dd8d2ce9116c86f9fc5be232bcb599b455f800"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b755ee9bba8f90937c05b27cf5e6f7ddec0c2539b938f24f143a852d70c65d32"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efe13cf1e4f129d85436f5768b9db887310500e3f845ece77bae5bd0ac97429d"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c60926c21d808d39079a39cbf93f196dc895658b97ec88eca2651b544f24ce9"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd46bae9db19ee9b01c68a97b25e554fb9db7ce4536db588dfc8e80ff20e47e2"} {"level":"info","ts":"2026-08-02T10:27:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"} {"level":"error","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"} {"level":"error","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"error","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:28:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:28:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37814","PortSpecifier":{"PortValue":37814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cccb392d-269e-4d1f-be32-a97af30b0e39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","object":"source:{address:{socket_address:{address:\"10.132.0.8:37814\" port_value:37814}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666550 nanos:731119214} http:{id:\"cccb392d-269e-4d1f-be32-a97af30b0e39\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"cccb392d-269e-4d1f-be32-a97af30b0e39\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cccb392d-269e-4d1f-be32-a97af30b0e39"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"cccb392d-269e-4d1f-be32-a97af30b0e39","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":731119214,"seconds":1785666550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37814},"address":"10.132.0.8:37814"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"cccb392d-269e-4d1f-be32-a97af30b0e39"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"cccb392d-269e-4d1f-be32-a97af30b0e39","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":731119214,"seconds":1785666550},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:37814","port":37814}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/sub-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cccb392d-269e-4d1f-be32-a97af30b0e39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40032","PortSpecifier":{"PortValue":40032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36c258f5-006f-478c-9fff-a51cce0c366a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","object":"source:{address:{socket_address:{address:\"10.132.0.8:40032\" port_value:40032}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666550 nanos:787751390} http:{id:\"36c258f5-006f-478c-9fff-a51cce0c366a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"36c258f5-006f-478c-9fff-a51cce0c366a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"36c258f5-006f-478c-9fff-a51cce0c366a"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"36c258f5-006f-478c-9fff-a51cce0c366a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":787751390,"seconds":1785666550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40032},"address":"10.132.0.8:40032"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"36c258f5-006f-478c-9fff-a51cce0c366a"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"36c258f5-006f-478c-9fff-a51cce0c366a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":787751390,"seconds":1785666550},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:40032","port":40032}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/sub-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36c258f5-006f-478c-9fff-a51cce0c366a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37820","PortSpecifier":{"PortValue":37820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","object":"source:{address:{socket_address:{address:\"10.132.0.8:37820\" port_value:37820}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666550 nanos:848742013} http:{id:\"59edcddd-8a37-44e2-95ab-fac06f2b5155\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"59edcddd-8a37-44e2-95ab-fac06f2b5155\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-T2mxH2pbd5p8jXnV_O8LQjEEiIOFXFRbAHxn0kbn4Yfm6yOxnFicuvdzI9QK"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9c52a12f-7a6c-4f76-9369-ac18d18fcfab","keyName":"e2e-sub-iso-e40f45","subscription":"e2e-a-only-b5ddf4","tenant":"e2e-shared-a-e9225c","userId":"9c52a12f-7a6c-4f76-9369-ac18d18fcfab","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"59edcddd-8a37-44e2-95ab-fac06f2b5155"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":848742013,"seconds":1785666550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37820},"address":"10.132.0.8:37820"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"59edcddd-8a37-44e2-95ab-fac06f2b5155"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":848742013,"seconds":1785666550},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:37820","port":37820}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/sub-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b5ddf4"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59edcddd-8a37-44e2-95ab-fac06f2b5155","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40036","PortSpecifier":{"PortValue":40036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b727f8df-624d-4ca3-9aa6-968f767724d8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","object":"source:{address:{socket_address:{address:\"10.132.0.8:40036\" port_value:40036}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666550 nanos:895666539} http:{id:\"b727f8df-624d-4ca3-9aa6-968f767724d8\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b727f8df-624d-4ca3-9aa6-968f767724d8\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FuIcXHYE22frkucV_TYt37qNRqTLj2G7qt3cWs3Y30NpZVs0xygTMMZCZwJj"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b73e64c-4d42-46bb-ba55-c30510bb99b5","keyName":"e2e-sub-iso-5eec47","subscription":"e2e-b-only-b5ddf4","tenant":"e2e-shared-b-0c6483","userId":"6b73e64c-4d42-46bb-ba55-c30510bb99b5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b727f8df-624d-4ca3-9aa6-968f767724d8"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"b727f8df-624d-4ca3-9aa6-968f767724d8","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":895666539,"seconds":1785666550}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40036},"address":"10.132.0.8:40036"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b727f8df-624d-4ca3-9aa6-968f767724d8"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"b727f8df-624d-4ca3-9aa6-968f767724d8","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":895666539,"seconds":1785666550},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:40036","port":40036}}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/sub-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b5ddf4"} {"level":"info","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b727f8df-624d-4ca3-9aa6-968f767724d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:29:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"debug","ts":"2026-08-02T10:29:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"error","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"error","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"error","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:29:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:29:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:29:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53924","PortSpecifier":{"PortValue":53924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","object":"source:{address:{socket_address:{address:\"10.132.0.8:53924\" port_value:53924}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666576 nanos:574296266} http:{id:\"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":574296266,"seconds":1785666576}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53924},"address":"10.132.0.8:53924"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":574296266,"seconds":1785666576},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:53924","port":53924}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/sub-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc5738e-dc87-43b4-95e4-a3592a9e1bf1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42218","PortSpecifier":{"PortValue":42218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1681fd39-195e-437f-a0c1-970ab3275c28","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","object":"source:{address:{socket_address:{address:\"10.132.0.8:42218\" port_value:42218}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666576 nanos:619363435} http:{id:\"1681fd39-195e-437f-a0c1-970ab3275c28\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1681fd39-195e-437f-a0c1-970ab3275c28\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1681fd39-195e-437f-a0c1-970ab3275c28"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"1681fd39-195e-437f-a0c1-970ab3275c28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":619363435,"seconds":1785666576}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42218},"address":"10.132.0.8:42218"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdC03Yzk0OGJmZjliLXo0OXh4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1681fd39-195e-437f-a0c1-970ab3275c28"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"1681fd39-195e-437f-a0c1-970ab3275c28","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":619363435,"seconds":1785666576},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:42218","port":42218}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/sub-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1681fd39-195e-437f-a0c1-970ab3275c28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:53930","PortSpecifier":{"PortValue":53930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","object":"source:{address:{socket_address:{address:\"10.132.0.8:53930\" port_value:53930}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666576 nanos:662389693} http:{id:\"0fa2c776-10c4-41c4-ba40-c8d3c65d5904\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0fa2c776-10c4-41c4-ba40-c8d3c65d5904\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Je7Ooax2Chi7QvAa_HKUfYGRchvBhc8Ulb6MKg4XEXsPtnWRC7xYxIyjHSY6"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31858988-48ad-45f0-922d-9e3ac0353d21","keyName":"e2e-sub-iso-f209e2","subscription":"e2e-shared-sub-17c037","tenant":"e2e-shared-a-e9225c","userId":"31858988-48ad-45f0-922d-9e3ac0353d21","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":662389693,"seconds":1785666576}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53930},"address":"10.132.0.8:53930"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":662389693,"seconds":1785666576},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:53930","port":53930}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/sub-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-17c037"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fa2c776-10c4-41c4-ba40-c8d3c65d5904","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c705de7-32c5-4267-a34d-35643445bef9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42220","PortSpecifier":{"PortValue":42220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c705de7-32c5-4267-a34d-35643445bef9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c705de7-32c5-4267-a34d-35643445bef9","object":"source:{address:{socket_address:{address:\"10.132.0.8:42220\" port_value:42220}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666576 nanos:698220052} http:{id:\"0c705de7-32c5-4267-a34d-35643445bef9\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdC03Yzk0OGJmZjliLXo0OXh4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0c705de7-32c5-4267-a34d-35643445bef9\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-F18Yf9U5u290cW9v_IrtBFFAUMvV5HMpZ46n3CoXcp8ibN0pxLmS2YmHlq9M"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2a7889d-e0c9-4b74-95ac-ddabf8e92d65","keyName":"e2e-sub-iso-068cf2","subscription":"e2e-shared-sub-17c037","tenant":"e2e-shared-b-0c6483","userId":"d2a7889d-e0c9-4b74-95ac-ddabf8e92d65","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c705de7-32c5-4267-a34d-35643445bef9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0c705de7-32c5-4267-a34d-35643445bef9"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"0c705de7-32c5-4267-a34d-35643445bef9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":698220052,"seconds":1785666576}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":42220},"address":"10.132.0.8:42220"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0c705de7-32c5-4267-a34d-35643445bef9"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"0c705de7-32c5-4267-a34d-35643445bef9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":698220052,"seconds":1785666576},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:42220","port":42220}}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/sub-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c705de7-32c5-4267-a34d-35643445bef9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-17c037"} {"level":"info","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c705de7-32c5-4267-a34d-35643445bef9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:29:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c705de7-32c5-4267-a34d-35643445bef9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493a5369e252cbff7b872c04dc705228f578550c1460d3cc2bc4b39a546c9c01"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e873cf4eb2ea5a96bdd1e9eb214cb1a80d64cd32eba1c904247f08c0c165d2b9"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0278d6132a3635970e24532962971a067793a7d42420cce02be6c47695cba175"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c384bf825da10c105bd40f28a9d64e046fd8357ffa2baed9fa4a0296f498b80"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e023cbd6379b905faba26c3b4de1ec8a387063549c3d46e4f05a304e8b508930"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a26cf645881765f92f14f8da14b2e908090b010d99f5d0c08b072b98966f65a"} {"level":"info","ts":"2026-08-02T10:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc02c52ae7a5eebc2e90b40d7d8b811e95d731bffc1331814ab4f0d7f81a63d"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/668de81b06829834720a8b6e4a345fbbb098a4f9da4017ff5d1451e00a281df7"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a77c6488fd9b9cee6e619b6b0f4bb34ecdf4fd753b09720ee5ce9bafc304c3f"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3729e36b2f50ac6135d6c84eafc81bc016350630579f299a7df299e6cd8e9feb"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02a13abfb9b7babb3b62b95206e14cef10114d50fe5479a24e76da3caa70182a"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a87607e9969c7484a5f5f7f5d21a213b426575c2c4f3121e054cecb311f654f"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f1df5959da8b5cc6a1b06f54242027459159b405bf676b9d420540d6647996a"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/228c5d1711b8fac07010d78a260730f389283095a6df0f2c43f650bd280dddc9"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cbcbca5d005085bd2bf8b33133fabcdf76230cd1240b5eeaacedb99cd769cd1"} {"level":"info","ts":"2026-08-02T10:29:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98466233bec91f9b07cf7bab052a6e88d362e14d6c1a18697d9ecf0a095e4386"} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f"} {"level":"error","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc"} {"level":"info","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"info","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"debug","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"debug","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"debug","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"error","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"error","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"error","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58516","PortSpecifier":{"PortValue":58516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","object":"source:{address:{socket_address:{address:\"10.132.0.8:58516\" port_value:58516}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666669 nanos:493967404} http:{id:\"44dc99f7-5bf3-48f6-ba07-a550c96d19db\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"44dc99f7-5bf3-48f6-ba07-a550c96d19db\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":493967404,"seconds":1785666669}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58516},"address":"10.132.0.8:58516"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":493967404,"seconds":1785666669},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:58516","port":58516}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44dc99f7-5bf3-48f6-ba07-a550c96d19db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58564","PortSpecifier":{"PortValue":58564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"965bce52-0e6a-407c-889f-9557e01ef5e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","object":"source:{address:{socket_address:{address:\"10.132.0.8:58564\" port_value:58564}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666669 nanos:539978277} http:{id:\"965bce52-0e6a-407c-889f-9557e01ef5e9\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"965bce52-0e6a-407c-889f-9557e01ef5e9\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdC03Yzk0OGJmZjliLXo0OXh4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"965bce52-0e6a-407c-889f-9557e01ef5e9"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"965bce52-0e6a-407c-889f-9557e01ef5e9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":539978277,"seconds":1785666669}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58564},"address":"10.132.0.8:58564"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"965bce52-0e6a-407c-889f-9557e01ef5e9"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"965bce52-0e6a-407c-889f-9557e01ef5e9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":539978277,"seconds":1785666669},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:58564","port":58564}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"965bce52-0e6a-407c-889f-9557e01ef5e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58526","PortSpecifier":{"PortValue":58526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","object":"source:{address:{socket_address:{address:\"10.132.0.8:58526\" port_value:58526}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666669 nanos:584791644} http:{id:\"89179af1-5230-4ce2-92cd-cc8ee18145f3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"89179af1-5230-4ce2-92cd-cc8ee18145f3\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uuxsnaSmYSVWDIok_84wxHzcTpPs89B4TgnBDc2ak1TH5Tn9FGivdUSUAOYJ"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","subscription":"e2e-rate-iso-a-0e511f","tenant":"e2e-shared-a-e9225c","userId":"94055581-2cb2-4c26-adc3-98f78c8395d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"89179af1-5230-4ce2-92cd-cc8ee18145f3"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":584791644,"seconds":1785666669}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58526},"address":"10.132.0.8:58526"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"89179af1-5230-4ce2-92cd-cc8ee18145f3"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":584791644,"seconds":1785666669},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:58526","port":58526}}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0e511f"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","selected_subscription":"e2e-rate-iso-a-0e511f","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-0e511f@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89179af1-5230-4ce2-92cd-cc8ee18145f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47424ce-83b2-4f01-9013-c110954b356f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58534","PortSpecifier":{"PortValue":58534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f47424ce-83b2-4f01-9013-c110954b356f","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f47424ce-83b2-4f01-9013-c110954b356f","object":"source:{address:{socket_address:{address:\"10.132.0.8:58534\" port_value:58534}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666670 nanos:675982240} http:{id:\"f47424ce-83b2-4f01-9013-c110954b356f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"f47424ce-83b2-4f01-9013-c110954b356f\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uuxsnaSmYSVWDIok_84wxHzcTpPs89B4TgnBDc2ak1TH5Tn9FGivdUSUAOYJ"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","subscription":"e2e-rate-iso-a-0e511f","tenant":"e2e-shared-a-e9225c","userId":"94055581-2cb2-4c26-adc3-98f78c8395d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f47424ce-83b2-4f01-9013-c110954b356f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f47424ce-83b2-4f01-9013-c110954b356f"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"f47424ce-83b2-4f01-9013-c110954b356f","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":675982240,"seconds":1785666670}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58534},"address":"10.132.0.8:58534"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f47424ce-83b2-4f01-9013-c110954b356f"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"f47424ce-83b2-4f01-9013-c110954b356f","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":675982240,"seconds":1785666670},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:58534","port":58534}}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0e511f"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f47424ce-83b2-4f01-9013-c110954b356f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","selected_subscription":"e2e-rate-iso-a-0e511f","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-0e511f@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47424ce-83b2-4f01-9013-c110954b356f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f47424ce-83b2-4f01-9013-c110954b356f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:58540","PortSpecifier":{"PortValue":58540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","object":"source:{address:{socket_address:{address:\"10.132.0.8:58540\" port_value:58540}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666671 nanos:717367772} http:{id:\"ff53ef6d-03f5-47de-9eea-9c75e4afddf7\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"ff53ef6d-03f5-47de-9eea-9c75e4afddf7\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uuxsnaSmYSVWDIok_84wxHzcTpPs89B4TgnBDc2ak1TH5Tn9FGivdUSUAOYJ"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","subscription":"e2e-rate-iso-a-0e511f","tenant":"e2e-shared-a-e9225c","userId":"94055581-2cb2-4c26-adc3-98f78c8395d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":717367772,"seconds":1785666671}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58540},"address":"10.132.0.8:58540"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":717367772,"seconds":1785666671},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:58540","port":58540}}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0e511f"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"94055581-2cb2-4c26-adc3-98f78c8395d1","keyName":"e2e-rate-a-0e511f","selected_subscription":"e2e-rate-iso-a-0e511f","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-0e511f@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0e511f","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff53ef6d-03f5-47de-9eea-9c75e4afddf7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"error","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"error","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36158","PortSpecifier":{"PortValue":36158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","object":"source:{address:{socket_address:{address:\"10.132.0.8:36158\" port_value:36158}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666693 nanos:948357108} http:{id:\"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":948357108,"seconds":1785666693}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36158},"address":"10.132.0.8:36158"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":948357108,"seconds":1785666693},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:36158","port":36158}}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46b2bcb-22bf-4c50-9fb4-e3af44ff329b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57376","PortSpecifier":{"PortValue":57376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","object":"source:{address:{socket_address:{address:\"10.132.0.8:57376\" port_value:57376}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666693 nanos:992417639} http:{id:\"16f57f57-5f00-42ca-b361-1f7cecfe840e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"16f57f57-5f00-42ca-b361-1f7cecfe840e\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"16f57f57-5f00-42ca-b361-1f7cecfe840e"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":992417639,"seconds":1785666693}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57376},"address":"10.132.0.8:57376"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"16f57f57-5f00-42ca-b361-1f7cecfe840e"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":992417639,"seconds":1785666693},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:57376","port":57376}}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16f57f57-5f00-42ca-b361-1f7cecfe840e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23793591-6932-45b6-91c9-1744db31640a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36170","PortSpecifier":{"PortValue":36170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23793591-6932-45b6-91c9-1744db31640a","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23793591-6932-45b6-91c9-1744db31640a","object":"source:{address:{socket_address:{address:\"10.132.0.8:36170\" port_value:36170}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666694 nanos:36329611} http:{id:\"23793591-6932-45b6-91c9-1744db31640a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"23793591-6932-45b6-91c9-1744db31640a\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZkyLOpPMktH4yBxG_CLSAspFqh82NAUp5xJ7URTxFEmVOtSC2WiWwyq7Eekr"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23793591-6932-45b6-91c9-1744db31640a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","subscription":"e2e-rate-iso-a-a0780b","tenant":"e2e-shared-a-e9225c","userId":"22597f40-54f9-4228-a4ad-fd003f2a7515","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23793591-6932-45b6-91c9-1744db31640a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23793591-6932-45b6-91c9-1744db31640a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"23793591-6932-45b6-91c9-1744db31640a"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"23793591-6932-45b6-91c9-1744db31640a","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":36329611,"seconds":1785666694}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36170},"address":"10.132.0.8:36170"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"23793591-6932-45b6-91c9-1744db31640a"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"23793591-6932-45b6-91c9-1744db31640a","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":36329611,"seconds":1785666694},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:36170","port":36170}}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0780b"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23793591-6932-45b6-91c9-1744db31640a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","selected_subscription":"e2e-rate-iso-a-a0780b","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-a0780b@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23793591-6932-45b6-91c9-1744db31640a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23793591-6932-45b6-91c9-1744db31640a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36178","PortSpecifier":{"PortValue":36178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06305221-bfb1-9994-985c-cc011ffbeda6","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","object":"source:{address:{socket_address:{address:\"10.132.0.8:36178\" port_value:36178}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666695 nanos:93291669} http:{id:\"06305221-bfb1-9994-985c-cc011ffbeda6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdC03OWRiYzRiZGZiLWc3ZHhtCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWU5MjI1Yy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lOTIyNWMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"06305221-bfb1-9994-985c-cc011ffbeda6\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZkyLOpPMktH4yBxG_CLSAspFqh82NAUp5xJ7URTxFEmVOtSC2WiWwyq7Eekr"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","subscription":"e2e-rate-iso-a-a0780b","tenant":"e2e-shared-a-e9225c","userId":"22597f40-54f9-4228-a4ad-fd003f2a7515","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"06305221-bfb1-9994-985c-cc011ffbeda6"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"06305221-bfb1-9994-985c-cc011ffbeda6","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":93291669,"seconds":1785666695}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36178},"address":"10.132.0.8:36178"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"06305221-bfb1-9994-985c-cc011ffbeda6"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"06305221-bfb1-9994-985c-cc011ffbeda6","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":93291669,"seconds":1785666695},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:36178","port":36178}}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0780b"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","selected_subscription":"e2e-rate-iso-a-a0780b","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-a0780b@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06305221-bfb1-9994-985c-cc011ffbeda6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:36194","PortSpecifier":{"PortValue":36194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","object":"source:{address:{socket_address:{address:\"10.132.0.8:36194\" port_value:36194}}} destination:{address:{socket_address:{address:\"10.134.0.48:443\" port_value:443}}} request:{time:{seconds:1785666696 nanos:140077825} http:{id:\"88676af7-6c0f-4602-9baf-dc21035f4b8d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"88676af7-6c0f-4602-9baf-dc21035f4b8d\"} path:\"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions\" host:\"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZkyLOpPMktH4yBxG_CLSAspFqh82NAUp5xJ7URTxFEmVOtSC2WiWwyq7Eekr"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","subscription":"e2e-rate-iso-a-a0780b","tenant":"e2e-shared-a-e9225c","userId":"22597f40-54f9-4228-a4ad-fd003f2a7515","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e9225c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"88676af7-6c0f-4602-9baf-dc21035f4b8d"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":140077825,"seconds":1785666696}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36194},"address":"10.132.0.8:36194"}}}}},"destination":{"address":"10.134.0.48:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"},"headers":{":authority":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-e9225c-kserve-workload-svc.ai-tenant-e2e-shared-a-e9225c.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.48~e2e-shared-a-e9225c-openshift-default-79dbc4bdfb-g7dxm.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"88676af7-6c0f-4602-9baf-dc21035f4b8d"},"host":"e2e-shared-a-e9225c.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","method":"POST","path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":140077825,"seconds":1785666696},"url_path":"/ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:36194","port":36194}}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0780b"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"22597f40-54f9-4228-a4ad-fd003f2a7515","keyName":"e2e-rate-a-a0780b","selected_subscription":"e2e-rate-iso-a-a0780b","selected_subscription_key":"ai-tenant-e2e-shared-a-e9225c/e2e-rate-iso-a-a0780b@ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-e9225c/models/facebook/opt-125m","name":"rate-test-model-e9225c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0780b","namespace":"ai-tenant-e2e-shared-a-e9225c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-e9225c/rate-test-model-e9225c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88676af7-6c0f-4602-9baf-dc21035f4b8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:57388","PortSpecifier":{"PortValue":57388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e211ed9-c1eb-491a-93b6-22f97357154b","method":"POST","path":"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions","host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","object":"source:{address:{socket_address:{address:\"10.132.0.8:57388\" port_value:57388}}} destination:{address:{socket_address:{address:\"10.134.0.49:443\" port_value:443}}} request:{time:{seconds:1785666696 nanos:182416067} http:{id:\"5e211ed9-c1eb-491a-93b6-22f97357154b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-0c6483-kserve-workload-svc.ai-tenant-e2e-shared-b-0c6483.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"5e211ed9-c1eb-491a-93b6-22f97357154b\"} path:\"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions\" host:\"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AOLRScLVd7EPRUKy_9GRBXCUpctXXGi20AvLW2IqSodW9jB6mtIj54cJUt7Y"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a6b1fb6-6ebd-4186-b0f8-29546b0d3e49","keyName":"e2e-rate-b-a0780b","subscription":"e2e-rate-iso-b-a0780b","tenant":"e2e-shared-b-0c6483","userId":"9a6b1fb6-6ebd-4186-b0f8-29546b0d3e49","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0c6483.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m","name":"rate-test-model-0c6483","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0780b","namespace":"ai-tenant-e2e-shared-b-0c6483","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483"}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-0c6483-kserve-workload-svc.ai-tenant-e2e-shared-b-0c6483.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5e211ed9-c1eb-491a-93b6-22f97357154b"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"5e211ed9-c1eb-491a-93b6-22f97357154b","method":"POST","path":"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":182416067,"seconds":1785666696}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57388},"address":"10.132.0.8:57388"}}}}},"destination":{"address":"10.134.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"},"headers":{":authority":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-0c6483-kserve-workload-svc.ai-tenant-e2e-shared-b-0c6483.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdC03Yzk0OGJmZjliLXo0OXh4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTBjNjQ4My1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0wYzY0ODMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.49~e2e-shared-b-0c6483-openshift-default-7c948bff9b-z49xx.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"5e211ed9-c1eb-491a-93b6-22f97357154b"},"host":"e2e-shared-b-0c6483.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"5e211ed9-c1eb-491a-93b6-22f97357154b","method":"POST","path":"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":182416067,"seconds":1785666696},"url_path":"/ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:57388","port":57388}}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a0780b"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a6b1fb6-6ebd-4186-b0f8-29546b0d3e49","keyName":"e2e-rate-b-a0780b","selected_subscription":"e2e-rate-iso-b-a0780b","selected_subscription_key":"ai-tenant-e2e-shared-b-0c6483/e2e-rate-iso-b-a0780b@ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-0c6483/models/facebook/opt-125m","name":"rate-test-model-0c6483","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0780b","namespace":"ai-tenant-e2e-shared-b-0c6483","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0c6483/rate-test-model-0c6483"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:31:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e211ed9-c1eb-491a-93b6-22f97357154b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5887f4e8ebfbfea8b224f8347e85330ee32e4830463438d200939624269aaa2f"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160aa653850b64be2f97ce7c182d3b88963631654c91d46238a83133503fbf4c"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31e0f8174d985b7212abbb451988b2e701ecb4cc1d274bd6844708762e67bbf5"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61c1ca816fb93779bd47972ebec6a7553e5c28f9599b09468099816928701e79"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f77f86eb21d3e96c3f7a2c8b5ee4340a0a666367b856b0b41d34d9577f9c998"} {"level":"info","ts":"2026-08-02T10:31:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c239295cf2b82d47f93167d4fd9da8a739e46243fbd916b4978e45db55915dd8"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ddd22891f2219c3aaae9f5b93b59de1c0cf8f73fe71b7e82ca2614843d1fad"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/762fa53ed6440e41a43f9dbf81aaddad0dacbfd96ca585b3b8157616f3d1c3fc"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba3d73d3baf394a2ede20dd216c3f4afa5e6848ebba59cac443fcad06acfa8ec"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd43928ad38ab9f29d5ea057b8cd447318eef61609ea64f15743c7727ee07a34"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93b591fbc315864d94dc37c51559b1680e1b2018af6caec32f921541483dbf83"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90fe2beed994ed654a7f42d4564a0e8a8642b6041196f825efb79ddc6fb1643"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d3ca0f1be3b86e0c79532241178d7ec64abafc0763bbed08411af46d21a68a4"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbb2ef70226e413eef20bfb886177689a1dfd48a29eebb1e804ca91ab07a6c50"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4539ad3a0ac1abace37a9890b4bd9925a0f4809c43e7ff47fe7f72a5a245df"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33c95f1ea152d4bab331823355157b147383d6a684971a1e71ac705b9558cd14"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd56a33ff14128c3f3e5db121f6f111293723b3676c6f8325e40dadf406a0798"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5da7c797978e6663e77894545b4a1e99084f2d2ac9a21ffd5ccb927ffc17d9ee"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200d19cc6154e3d5bf7abafbb4ca80639877256715ccbe2fd06cd552cd82335"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0953b4c2945779b99fc3bd6af0dccaa5a7d2ebf464ba38a1b5f9e0cd10e39ee3"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb54e6883dd00342dc53d17097ffc1004a04d717b1461e8ff1923152d1aefab0"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74cf9465ad3cf3e7da776e9ccc061b0913f8db164e61c85b082aa1e44c909555"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78d7f62f88e4228ed17d50abf3aead66852eb13c09a769c90ff7e4944776e7ef"} {"level":"info","ts":"2026-08-02T10:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dce3248d926234c959df65e9c59b00c9ae0443c56f0c86b34505fd9f28ddeeb"} {"level":"info","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45766","PortSpecifier":{"PortValue":45766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","object":"source:{address:{socket_address:{address:\"10.132.0.8:45766\" port_value:45766}}} destination:{address:{socket_address:{address:\"10.132.0.53:443\" port_value:443}}} request:{time:{seconds:1785666780 nanos:97408995} http:{id:\"4903ac47-5ae2-4fe2-bed6-184f8daa2d76\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4903ac47-5ae2-4fe2-bed6-184f8daa2d76\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76"},"host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":97408995,"seconds":1785666780}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45766},"address":"10.132.0.8:45766"}}}}},"destination":{"address":"10.132.0.53:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76"},"host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":97408995,"seconds":1785666780},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:45766","port":45766}}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4903ac47-5ae2-4fe2-bed6-184f8daa2d76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45780","PortSpecifier":{"PortValue":45780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","object":"source:{address:{socket_address:{address:\"10.132.0.8:45780\" port_value:45780}}} destination:{address:{socket_address:{address:\"10.132.0.53:443\" port_value:443}}} request:{time:{seconds:1785666780 nanos:155945376} http:{id:\"6945311b-1ed1-4c5f-ac8c-3200ffdbd101\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"6945311b-1ed1-4c5f-ac8c-3200ffdbd101\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OynWV7l80IEiw4Nz_XcuXvCnYWfK4pnjsc8JO0Z6E2GEBbibLlSQmk8DZQcA"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b54c9a00-7b71-4f71-9105-e61174173344","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"b54c9a00-7b71-4f71-9105-e61174173344","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101"},"host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":155945376,"seconds":1785666780}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45780},"address":"10.132.0.8:45780"}}}}},"destination":{"address":"10.132.0.53:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LWpzdjVrCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.53~maas-default-gateway-openshift-default-78bb78ff78-jsv5k.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101"},"host":"maas.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":155945376,"seconds":1785666780},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:45780","port":45780}}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b54c9a00-7b71-4f71-9105-e61174173344","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6945311b-1ed1-4c5f-ac8c-3200ffdbd101","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"} {"level":"error","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-02T10:33:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-02T10:33:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"info","ts":"2026-08-02T10:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50298","PortSpecifier":{"PortValue":50298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5b49db2-1f29-4de9-a443-772256120c7c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:33:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","object":"source:{address:{socket_address:{address:\"10.132.0.8:50298\" port_value:50298}}} destination:{address:{socket_address:{address:\"10.132.0.82:443\" port_value:443}}} request:{time:{seconds:1785666822 nanos:985927328} http:{id:\"c5b49db2-1f29-4de9-a443-772256120c7c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c5b49db2-1f29-4de9-a443-772256120c7c\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:33:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/b042f36bf734"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1a4eefbe-14cb-4804-a878-5bf4a7935f8e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1830ae89-9f23-4f66-8dfa-07e20aa5225d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c5b49db2-1f29-4de9-a443-772256120c7c"},"host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"c5b49db2-1f29-4de9-a443-772256120c7c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":985927328,"seconds":1785666822}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50298},"address":"10.132.0.8:50298"}}}}},"destination":{"address":"10.132.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"},"headers":{":authority":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdC01NWQ0ZGRiZGQ4LWxqa3RxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c5b49db2-1f29-4de9-a443-772256120c7c"},"host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"c5b49db2-1f29-4de9-a443-772256120c7c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":985927328,"seconds":1785666822},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:50298","port":50298}}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5c4717/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:33:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5b49db2-1f29-4de9-a443-772256120c7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138560a6-f644-4255-ad05-ce44987ef567","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50306","PortSpecifier":{"PortValue":50306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"138560a6-f644-4255-ad05-ce44987ef567","method":"POST","path":"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions","host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"138560a6-f644-4255-ad05-ce44987ef567","object":"source:{address:{socket_address:{address:\"10.132.0.8:50306\" port_value:50306}}} destination:{address:{socket_address:{address:\"10.132.0.82:443\" port_value:443}}} request:{time:{seconds:1785666825 nanos:56245232} http:{id:\"138560a6-f644-4255-ad05-ce44987ef567\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-5c4717-kserve-workload-svc.ai-tenant-e2e-ipp-a-5c4717.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.8\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdC01NWQ0ZGRiZGQ4LWxqa3RxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.132.0.8\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"138560a6-f644-4255-ad05-ce44987ef567\"} path:\"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions\" host:\"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15iQyUmRhqe1qux0u_LxOkWMXdOxenBLulOkqE3mnXzQ0Wn8vdwUfRToqSPUM"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1bcba1ab-1962-4b1f-a48f-28eacc68379e","keyName":"e2e-ipp-5c4717","subscription":"ipp-route-5c4717-sub","tenant":"e2e-ipp-a-5c4717","userId":"1bcba1ab-1962-4b1f-a48f-28eacc68379e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5c4717.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5c4717/models/facebook/opt-125m","name":"ipp-route-5c4717","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5c4717-sub","namespace":"ai-tenant-e2e-ipp-a-5c4717","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717"}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"138560a6-f644-4255-ad05-ce44987ef567","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-5c4717-kserve-workload-svc.ai-tenant-e2e-ipp-a-5c4717.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"138560a6-f644-4255-ad05-ce44987ef567"},"host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"138560a6-f644-4255-ad05-ce44987ef567","method":"POST","path":"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":56245232,"seconds":1785666825}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50306},"address":"10.132.0.8:50306"}}}}},"destination":{"address":"10.132.0.82:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"},"headers":{":authority":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-5c4717-kserve-workload-svc.ai-tenant-e2e-ipp-a-5c4717.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.8","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdC01NWQ0ZGRiZGQ4LWxqa3RxCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTVjNDcxNy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01YzQ3MTctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.82~e2e-ipp-a-5c4717-openshift-default-55d4ddbdd8-ljktq.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.132.0.8","x-forwarded-host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"138560a6-f644-4255-ad05-ce44987ef567"},"host":"e2e-ipp-a-5c4717.apps.55cee96b-675c-4be0-9036-b042f36bf734.prod.konfluxeaas.com","id":"138560a6-f644-4255-ad05-ce44987ef567","method":"POST","path":"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":56245232,"seconds":1785666825},"url_path":"/ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.8:50306","port":50306}}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5c4717/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-5c4717-sub"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"138560a6-f644-4255-ad05-ce44987ef567","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1bcba1ab-1962-4b1f-a48f-28eacc68379e","keyName":"e2e-ipp-5c4717","selected_subscription":"ipp-route-5c4717-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717-sub@ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5c4717/models/facebook/opt-125m","name":"ipp-route-5c4717","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5c4717-sub","namespace":"ai-tenant-e2e-ipp-a-5c4717","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5c4717/ipp-route-5c4717"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138560a6-f644-4255-ad05-ce44987ef567","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-02T10:33:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"138560a6-f644-4255-ad05-ce44987ef567","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82227f129842f46601c521683bc6520426db2567de47ecc59342aeb5c8518b1a"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e5e543ac24c5ae6c82dfe6ddc27dd0f64d6449fb24fee875f8a7186575ecc36"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04993bb2a8855b912f08584aec7d75d7663e12811241158421e40f468eebc1f4"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d862c7fca10e7d37b4e39a851f4a495b5c7c6fe468b54a569473e36f53b7b560"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5195702ee1b2f1bef91acd7f1a0a6a8738b0e579168263805ece77731c84442c"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff2dd3fb8b83ef709d9e3795fa1ec95c4525c79d2e080fcb8c8b5824b99c5f3e"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd163b0eb1dc70eaf643f16d50fe3ad17da997549a0e4729085d8626d579c6d8"} {"level":"info","ts":"2026-08-02T10:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9294ec318550b066f6ba8af0208f43a9a7fb47fd824e7ddec84c9d827fb2c7d"} {"level":"info","ts":"2026-08-02T10:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0ef7724c650e34eef84b6e2276797680e2fbf72f7a599940b404e778d09b22e"} {"level":"info","ts":"2026-08-02T10:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7519183b79a579a34c93e03588bea4f404ba5a4e7cd9378e9f9e0fc6d4600d8"} {"level":"info","ts":"2026-08-02T10:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a4616d4881e889bb39fbdf9c372d5a97f2e7f496c2bac280666fd22b7114f2f"} {"level":"info","ts":"2026-08-02T10:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e2f35ebcede5c0b041f5c0665bd8753b43c4ca1c9d747c2db78d87e619f5453"}